index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("db5fc5cf50f8c1e19141eb238e57658c","6a968fd1608bca7255c329a0701dbf58","cafc26b215550521a12b38de38fa802b","76831271eb117b77a57869c80bfd6ba6","b5d3e0c3c470d2d41967229e17259c87","4511e57ae1eacdf1c2922bf1a94bfb8d","02843206001cd952472abf5ae2b981b2","8aeacd58d371f57774e63d217b6b6f98","cacf04cd560b70eaaf0e75f3da9a5e8f","7a7937f8d4dcb335e96db05b2fb64a1b","f3a55d49562e41c7d339fb52457513ba","5d3ab2baacf2ad986ed7542eeabf3dab","d4ad31f316dc4ca0e7170109174827cf","1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf","ae9593c0c80e55ff49c28e28bf8bc887","b6f17d59f38aba69d6da55ce36406729","153383634ee35b7db6ab59cde68bf526","c560d3371a16ef17dd79412f6ea99d3a","0cce02d2d835a996ad5dfc0406b44b01","d94c6323c3f77965451c0b7ebeb32e13","52ff761212eeaadcd3a95a1f8cce4030","4cb843f2a5b6ed7e806c69e6c25a1025","b6ab96dc4778c6704b6def5db448a020","232046aff635f1a5d81e415ef64649b7","58fafabd6ae8360c9d604cd314a27159","e582bd909800e87952eb1f206a279e47","ac99b5c1d66b5f0ddb4423c627ca8333","e34669d56a13d607da1f76618eb4b27e","ee76638004c68cfc34ff1fea2a7565a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://bitburny.kro.kr/aha/","http://bitthum.kro.kr/hu/","http://doma2.o-r.kr//","http://my.topton.r-e.kr/address/","http://nobtwoseb1.n-e.kr//","http://octseven1.p-e.kr//","http://tehyeran1.r-e.kr//","http://update.ahnlaib.kro.kr/aha/","http://update.doumi.kro.kr/aha/","http://update.onedrive.p-e.kr/aha/","http://yes24.r-e.kr/aha/")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="104.168.145.83" AND destinationport=993 OR destinationaddress="159.100.6.137" AND destinationport=993 OR destinationaddress="38.110.1.69" AND destinationport=993 OR destinationaddress="107.148.71.88" AND destinationport=993 OR destinationaddress="45.114.129.138" AND destinationport=33890 OR destinationaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="104.168.145.83" AND sourceport=993 OR sourceaddress="159.100.6.137" AND sourceport=993 OR sourceaddress="38.110.1.69" AND sourceport=993 OR sourceaddress="107.148.71.88" AND sourceport=993 OR sourceaddress="45.114.129.138" AND sourceport=33890 OR sourceaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="104.168.145.83" AND sourceport=993 OR translatedipaddress="159.100.6.137" AND sourceport=993 OR translatedipaddress="38.110.1.69" AND sourceport=993 OR translatedipaddress="107.148.71.88" AND sourceport=993 OR translatedipaddress="45.114.129.138" AND sourceport=33890 OR translatedipaddress="45.114.129.138" AND sourceport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND destinationtranslatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND destinationtranslatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND destinationtranslatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND destinationtranslatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND destinationtranslatedport=5500)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="104.168.145.83" AND translatedport=993 OR destinationtranslatedaddress="159.100.6.137" AND translatedport=993 OR destinationtranslatedaddress="38.110.1.69" AND translatedport=993 OR destinationtranslatedaddress="107.148.71.88" AND translatedport=993 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=33890 OR destinationtranslatedaddress="45.114.129.138" AND translatedport=5500)
