index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("cdf7fa901701ea1ef642aeb271c70361","1c97f92a144ac17e35c0e40dc89e12211ef5a7d5eb8db57ab093987ae6f3b9dc","153b713b3c6e642f39993d65ab33c5f0","5cf64f37fac74dc8f3dcb58831c3f2ce2b3cf522db448b40acdab254dd46cb3e","9ececb4acbf692c2a8ea411f2e7dd006","07f9b090172535089eb62a175e5deaf95853fdfd4bcabf099619c60057d38c57","5c7466a177fcaad2ebab131a54c28fab","bd7dbaf91ba162b6623292ebcdd2768c5d87e518240fe8ca200a81e9c7f01d76","b63c2ec9a631e0217d39c4a43527a0ce","1c1bb64e38c3fbe1a8f0dcb94ded96b332296bcbf839de438a4838fb43b20af3","420b7dc391f2cb0a9a684c1c48c334e2","01c5778be73c10c167fae6d7970c0be23a29af1873d743419b1803c035d92ef7","491e462bf1213fede82925dea5df8fff","ba2c8df04bcba5c3cfd343a59d8b59b76779e6c27eb27b7ac73ded97e08f0f39","9dd2bea4f2df8d3ef51dc10c6db2e07a","aaf7642f0cab75240ec65bc052a0a602366740b31754156b3a0c44dccec9bebe","8c56c22343853d3797037bdac2cec6c7","d4d7c12bdb66d40ad58c211dc6dd53a7494e03f9883336fa5464f0947530709f","17402fc21c7bafae2c1a149035cd0835","19b7ddd3b06794abe593bf533d88319711ca15bb0a08901b4ab7e52aab015452","d3065b4b1e8f6ecb63685219113ff0b8","4ef8db0ca305aaab9e2471b198168021c531862cb4319098302026b1cfa89947","5210b3d85fd0026205baee2c77ac0acd","64e8744b39e15b76311733014327311acd77330f8a135132f020eac78199ac8a","4065e647380358d22926c24a63c26ac4","5e122ff3066b6ef2a89295df925431c151f1713708c99772687a30c3204064bd","11a289347b95aab157aa0efe4a59bf24","91dc8593ee573f3a07e9356e65e06aed58d8e74258313e3414a7de278b3b5233","cba1f4c861240223332922d2913d18e5","b8ee794b04b69a1ee8687daabfe4f912368a500610a099e3072b03eeb66077f8","65102299bf8d7f0129ebbcb08a9c2d98","8168dc0baea6a74120fbabea261e83377697cb5f9726a2514f38ed04b46c56c8")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://www.adelaida.ua/plugins/vmsearch/wp-config-plugins.php","https://www.adelaida.ua/plugins/vmsearch/wp-config-themes.php","https://www.adelaida.ua/plugins/vmsearch/wp-file-script.js","https://atomydoc.kg/src/open_center/","https://atomydoc.kg/src/open_center/?page=ccl","https://atomydoc.kg/src/open_center/?page=fst","https://atomydoc.kg/src/open_center/?page=snd","https://atomydoc.kg/src/open_center/?page=trd","https://aleimportadora.net/images/slides_logo/","https://aleimportadora.net/images/slides_logo/?page=","https://aleimportadora.net/images/slides_logo/fg/message","https://aleimportadora.net/images/slides_logo/fg/music","https://aleimportadora.net/images/slides_logo/fg/video","https://aleimportadora.net/images/slides_logo/index.php","https://octoberoctopus.co.za/wp-includes/sitemaps/web/","https://sansaispa.com/wp-includes/images/gallery/","https://www.pierreagencement.fr/wp-content/languages/index.php","https://mail.aet.in.ua/outlook/api/logon.aspx","https://mail.kzp.bg/outlook/api/logon.aspx","https://mail.numina.md/owa/scripts/logon.aspx","https://mail.aet.in.ua/outlook/api/logoff.aspx","https://mail.arlingtonhousing.us/outlook/api/logoff.aspx","https://mail.kzp.bg/outlook/api/logoff.aspx","https://mail.lechateaudelatour.fr/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync","https://mail.lebsack.de/microsoft.exchange.mailboxreplicationservice.proxyservice/rpcwithcert/sync")
