index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("079907b7feab3673a1767dbfbc0626e656f5d3b03b6cff471cc7cf8a1973ab34","8d6dc026812420c5ef4b4fe72fb7067da14196fea45b6e99a594126246ac41fc","2849d92e7e188f4b76559b7018d81f6c463388a1b05b2674594f70cf4858c6b3","acbc775087da23725c3d783311d5f5083c93658de392c17994a9151447ac2b63","21cefe1d3fe0c69c32bebafca15d1ad3b17fae37b11e6b6effe155327387a752","71d56c61b765eee74dca65910ab9e0e2b35b21bcf6c97241ca7188a75f082f6f","44ff60d352169f280801cf2075295aab0a6151ff8f77b66d16c82776efce7fea","1d5d65f2eb065bac629c82a3399fbdc28ebe33eb288c1cd556cca6b4e6230b52","074ada5cc1947ebe5b9acb7f2dbf0fa599b043661f4fe640d403bdcc8427afca","ce04f9074a4cc8fa74fabff5a1fe21439fd8485220321c90bb06f5dbed50170c","db3a5a3a8855a48d2aa3ca2faef14e35cb8f3416d10df9c94576d9b5966def3d","b960c9de6714c9951ec21ca685998ba49eb29ef57868e780521b212ad6356e9c","79496baa4bf17a73006a359e146f02f7a92dd0794a07844064c7268724b98560","b2b8d0ae6f521f7405305a7afbe6d230c0dd22a18c4a852a6b69d9e54513e248","6154932ef81ed274c492f55775713b25a54676e283932b9048718c1b4a837f65","47dfa0061fdb021f3cefe62ac8198733be5adcb756f6042ca62efdc4f2502e97","fe84a4a119917f15418659ed30699d873b6445aa053d9303287b085e35bf1002","8e51819e39e4fc73d71b31e49b6775e47ee3b11af1fd9eb48a1e7d49dad62bc0","db6315274dc31bea8f42c79ea8928a4be2a5dd996c3e7a702f6a2bac5c463fee","8cdd557cff23ca7ddc3cf229f3b6d755878bf7aa864dd4e9d58e590b436987e5","d28e8041a0445271723842fa1d400b5b2aa93da4dfcd68b1c763774c870dc3b1","5171917e58a4e795a5e911f82560fa9b5c8f3d62efd4054bf58a2579e78b76d7","38b1cfb982c85ae89da19be83d502263c11da1c1a5997e0f15de2e5580d2161a")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="O365 General" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="O365 General" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="O365 General" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://dl.dropboxusercontent.com/scl/fi/slx06ol4jmjqn16icggin/.pptx","https://dl.dropboxusercontent.com/scl/fi/sumch8o12a4ko7wqqtrgo/kxsxhx-f.txt","https://dl.dropboxusercontent.com/scl/fi/gs58u6qvvxorzttv09yvt/kxsxhx-x.txt","https://dl.dropboxusercontent.com/scl/fi/lc7j7be3vtd2f3hadv0bz/v02_-d.pdf.pdf","https://dl.dropboxusercontent.com/scl/fi/vx23391zdxqu3qirc5z7g/241002-2024-ga-10-v2.pdf","https://dl.dropboxusercontent.com/scl/fi/nanwt6elsuxziz05hnlt4/cjfansgmlans1-x.txt","https://dl.dropboxusercontent.com/scl/fi/3br2y8fin0jqgrunrq3mf/cjfansgmlans1-f.txt","https://dl.dropboxusercontent.com/scl/fi/ffrwxyw5reunc12416rmp/v3.rtf","https://dl.dropboxusercontent.com/scl/fi/4qmp7p8fkmfwfsltt6imb/0607online.pdf","https://dl.dropboxusercontent.com/scl/fi/quo63qm8d3iqlhmpyib7p/20240608.bmp","https://dl.dropboxusercontent.com/scl/fi/p8f846myv0cbs5975uszw/loader.txt")
