index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("3e625e20d7f00b6d5121bb0a71cfa61f92d658bcd61af2cf5397e0ae28f4ba56","c33129a680e907e5f49bcbab4227c0b02e191770","030394b7a2642fe962a7705dcc832d2c08d006f5","fdb92fac37232790839163a3cae5f37372db7235","0E50B289C99A35F4AD884B6A3FFB76DE4B6EBC14","7E654C02E75EC78E8307DBDF95E15529AAAB5DFF","4D7F4BB3A23EAB33A3A28473292D44C5965DDC95","10326C2B20D278080AA0CA563FC3E454A85BB32F","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","563BC09180FD4BB601380659E922C3F7198306E0CAEBE99CD1D88CD2C3FD5C1B","5E2B2EBF3D57EE58CADA875B8FBCE536EDCBBF59ACC439081635C88789C67ACA","712733C12EA3B6B7A1BCC032CC02FD7EC9160F5129D9034BF9248B27EC057BD2","86366bb7646dcd1a02700ed4be4272cbff5887af")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://omx5iqrdbsoitf3q4xexrqw5r5tfw7vp3vl3li3lfo7saabxazshnead.onion")
