index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("2bca5abfac168454ce4e97a10ccf8ffc068e1428fa655286210006b298de42fb","106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f","c26344bfd07b871dd9f6bd7c71275216e18be265e91e5d0800348e8aa06543f9","0ab5b3e9790aa8ada1bbadd5d22908b5ba7b9f078e8f5b4e8fcc27cc0011cce7","d3f551d1fb2c307edfceb65793e527d94d76eba1cd8ab0a5d1f86db11c9474c3","d1cabe0d6a2f3cef5da04e35220e2431ef627470dd2801b4ed22a8ed9a918768","7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http:///193.242.145.138/mid/w1/midjourney.msi","http://193.176.190.41/down1/nvinstall.msi")
