index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.microupdate.xyz" OR destinationhostname CONTAINS "update.ajaxrenew.com" OR destinationhostname CONTAINS "peek.openssl-digicert.xyz" OR destinationhostname CONTAINS "api.wensente.xyz" OR destinationhostname CONTAINS "update.microsoftlab.top" OR destinationhostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "update.microupdate.xyz" OR sourcentdomain CONTAINS "update.ajaxrenew.com" OR sourcentdomain CONTAINS "peek.openssl-digicert.xyz" OR sourcentdomain CONTAINS "api.wensente.xyz" OR sourcentdomain CONTAINS "update.microsoftlab.top" OR sourcentdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "update.microupdate.xyz" OR sourcehostname CONTAINS "update.ajaxrenew.com" OR sourcehostname CONTAINS "peek.openssl-digicert.xyz" OR sourcehostname CONTAINS "api.wensente.xyz" OR sourcehostname CONTAINS "update.microsoftlab.top" OR sourcehostname CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "update.microupdate.xyz" OR destinationntdomain CONTAINS "update.ajaxrenew.com" OR destinationntdomain CONTAINS "peek.openssl-digicert.xyz" OR destinationntdomain CONTAINS "api.wensente.xyz" OR destinationntdomain CONTAINS "update.microsoftlab.top" OR destinationntdomain CONTAINS "api.microsoftlab.xyz")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b16bb2f910f21e2d4f6e2aa1a1ea0d8b","a75e9b702a892cc3e531e158ab2e4206b939f379","8502852561fcb867d9cbf45ac24c5985fa195432b542dbf8753d5f3d7175b120","809fcab1225981e87060033d72edaeaf","64f5044709efc77230484cec8a0d784947056022","62fea3942e884855283faf3fb68f41be747c5baa922d140509237c2d7bacdd17","a4a6abf4ed4c9447683fba729a17197b","ead02cb3f6b811427f2635a18398392bc2ebca3a","b0fb6c7eecbf711b2c503d7f8f3cf949404e2dd256b621c8cf1f3a2bdfb54301","4c3c7053ec145ad3976b2a84038c5feb","3246867705e8aad60491fe195bcc83af79470b22","15b52c468cfd4dee4599ec22b1c04b977416fbe5220ab30a097f403903d28a3a","0c4a84b66832a08dccc42b478d9d5e1b","160320b920a5ef22ac17b48146152ffbef60461f","5b56c5d86347e164c6e571c86dbf5b1535eae6b979fede6ed66b01e79ea33b7b","bde2a3c8e034d30ce13e684f324c6702","a413f4bcb7406710b76fabdaba95bb4690b24406","f04f444d9f17d4534d37d3369bf0b20415186862986e62a25f59fd0c2c87562f","f259765905cd16ff40132f35c85a862a","d9efd4c4e1fb4e3d4a171c4ca0985839ad1cdee9","7fe5674c9a3af8413d0ec71072a1c27d39edc14e4d110bfeb79d1148d55ce0b6","69ef2d7f9ed29840b60a7fd32030cbd1","b24e254f6fdd67318547915495f56f8f2a0ac4fe","91f8805e64f434099d0137d0b7ebf3db3ccbf5d76cd071d1604e3e12a348f2d9","577a47811b3c57a663bcbf2aab99c9e3","dbc48357bfbe41f5bfdd3045066486e76a23ad2d","70225015489cae369d311b62724ef0caf658ffdf62e5edbafd8267a8842e7696","b0175b09e58d34689a7403abed2ae2f5","46a9b419d73a518effbc19c3316d8a20cff9ce4a","5b5cd007fb96eef68d3d123eba82a4e4dfce50cdf3b05fe82bfa097870c09903","f3355c8f43dada5a62aab60089c03d1e","5df448af3f7935c3f4a2904b16af9ea00d13cb0c","c7a515276883a03981accfac182341940eb36071e2a59e8fb6cb22f81aa145ae")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("172.105.229.30","45.61.139.38","45.32.101.191")
