index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ms-team-ping7.com" OR destinationhostname CONTAINS "s1-rarlab.com" OR destinationhostname CONTAINS "my-smart-house1.com" OR destinationhostname CONTAINS "alphazero1-endscape.cc" OR destinationhostname CONTAINS "globalsnn2-new.cc" OR destinationhostname CONTAINS "globalsnn3-new.cc" OR destinationhostname CONTAINS "globalsnn1-new.cc" OR destinationhostname CONTAINS "bucket-aws-s1.com" OR destinationhostname CONTAINS "polystore9-servicebucket.cc" OR destinationhostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ms-team-ping7.com" OR sourcentdomain CONTAINS "s1-rarlab.com" OR sourcentdomain CONTAINS "my-smart-house1.com" OR sourcentdomain CONTAINS "alphazero1-endscape.cc" OR sourcentdomain CONTAINS "globalsnn2-new.cc" OR sourcentdomain CONTAINS "globalsnn3-new.cc" OR sourcentdomain CONTAINS "globalsnn1-new.cc" OR sourcentdomain CONTAINS "bucket-aws-s1.com" OR sourcentdomain CONTAINS "polystore9-servicebucket.cc" OR sourcentdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ms-team-ping7.com" OR sourcehostname CONTAINS "s1-rarlab.com" OR sourcehostname CONTAINS "my-smart-house1.com" OR sourcehostname CONTAINS "alphazero1-endscape.cc" OR sourcehostname CONTAINS "globalsnn2-new.cc" OR sourcehostname CONTAINS "globalsnn3-new.cc" OR sourcehostname CONTAINS "globalsnn1-new.cc" OR sourcehostname CONTAINS "bucket-aws-s1.com" OR sourcehostname CONTAINS "polystore9-servicebucket.cc" OR sourcehostname CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ms-team-ping7.com" OR destinationntdomain CONTAINS "s1-rarlab.com" OR destinationntdomain CONTAINS "my-smart-house1.com" OR destinationntdomain CONTAINS "alphazero1-endscape.cc" OR destinationntdomain CONTAINS "globalsnn2-new.cc" OR destinationntdomain CONTAINS "globalsnn3-new.cc" OR destinationntdomain CONTAINS "globalsnn1-new.cc" OR destinationntdomain CONTAINS "bucket-aws-s1.com" OR destinationntdomain CONTAINS "polystore9-servicebucket.cc" OR destinationntdomain CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "ms-team-ping7.com" OR requesturl CONTAINS "s1-rarlab.com" OR requesturl CONTAINS "my-smart-house1.com" OR requesturl CONTAINS "alphazero1-endscape.cc" OR requesturl CONTAINS "globalsnn2-new.cc" OR requesturl CONTAINS "globalsnn3-new.cc" OR requesturl CONTAINS "globalsnn1-new.cc" OR requesturl CONTAINS "bucket-aws-s1.com" OR requesturl CONTAINS "polystore9-servicebucket.cc" OR requesturl CONTAINS "microservice-update-s1-bucket.cc")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("5cfde2ce325e868bf9f3ea9608357d2a2df303c99be304d166bdf66f0d48d58e","0fa42bbd3b92236bc5e2d26f32fc5b8d7c8aaa0f157e3960e4ffa19491292945","8403d3d2955b141b84fe81dff046f0f355cc7185afc5ad7ae16706248fed3567","fd2d1ce509c558fa3abc0216530e8ebf1a7a9d7adab41df856b06dc80a4650f0","a220e348e4027846ee8e8c36b94b5d20a05aa11c18e659e44897d39c57444681","99340600db5fd3355a3d7ba9e243b65630d928e70afbfb401bce4e16d194e22a","b8805ac976918b1104750a09891336c7e6246426b8193f54f2847aee8cd96c68","bb4811f14f3c42f6a62106ab2fcd0510cb6c97bb5cbd0a35640fcdb29b358530","91efc7f56e7f8246d34e7d126c4f4cf71a1a5de977a4ba9097531a59e72bb68d","eac4f6a197b4a738c2294419fda97958b45faee3475b70b6ce113348b73eab3b","d261394ea0012f6eaddc21a2091db8a7d982d919f18d3ee6962dc4bb935d5759","e12e905d683de75543238312b44f3f69707e1a16bc40aa2d14048a8101ce49b8")
