index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "support.vmphere.com" OR destinationhostname CONTAINS "update.hobiter.com" OR destinationhostname CONTAINS "microsoft-beta.com" OR destinationhostname CONTAINS "zimbra-beta.info" OR destinationhostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "support.vmphere.com" OR sourcentdomain CONTAINS "update.hobiter.com" OR sourcentdomain CONTAINS "microsoft-beta.com" OR sourcentdomain CONTAINS "zimbra-beta.info" OR sourcentdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "support.vmphere.com" OR sourcehostname CONTAINS "update.hobiter.com" OR sourcehostname CONTAINS "microsoft-beta.com" OR sourcehostname CONTAINS "zimbra-beta.info" OR sourcehostname CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "support.vmphere.com" OR destinationntdomain CONTAINS "update.hobiter.com" OR destinationntdomain CONTAINS "microsoft-beta.com" OR destinationntdomain CONTAINS "zimbra-beta.info" OR destinationntdomain CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "support.vmphere.com" OR requesturl CONTAINS "update.hobiter.com" OR requesturl CONTAINS "microsoft-beta.com" OR requesturl CONTAINS "zimbra-beta.info" OR requesturl CONTAINS "microsoftapimap.com")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("f663149d618be90e5596b28103d38e963c44a69a5de4a1be62547259ca9ffd2d","83406905710e52f6af35b4b3c27549a12c28a628c492429d3a411fdb2d28cc8c","8187240dafbc62f2affd70da94295035c4179c8e3831cb96bdd9bd322e22d029","fa2a6dbc83fe55df848dfcaaf3163f8aaefe0c9727b3ead1da6b9fa78b598f2b","3fcfc4cb94d133563b17efe03f013e645fa2f878576282805ff5e58b907d2381","f45661ea4959a944ca2917454d1314546cc0c88537479e00550eef05bed5b1b9","9f62c1d330dddad347a207a6a565ae07192377f622fa7d74af80705d800c6096","461f5969b8f2196c630f0868c2ac717b11b1c51bc5b44b87f5aad19e001869cc","224becf3f19a3f69ca692d83a6fabfd2d78bab10f4480ff6da9716328e8fc727","6c1d918b33b1e6dab948064a59e61161e55fccee383e523223213aa2c20c609c","81bd2a8d68509dd293a31ddd6d31262247a9bde362c98cf71f86ae702ba90db4","7c6d29cb1f3f3e956905016f0171c2450cca8f70546eee56cface7ba31d78970","c8a5388e7ff682d3c16ab39e578e6c529f5e23a183cd5cbf094014e0225e2e0a","1dd423ff0106b15fd100dbc24c3ae9f9860a1fcdb6a871a1e27576f6681a0850","82e68dc50652ab6c7734ee913761d04b37429fca90b7be0711cd33391febff0a","e8d6fb67b3fd2a8aa608976bcb93601262d7a95d37f6bae7c0a45b02b3b325ad","2b6080641239604c625d41857167fea14b6ce47f6d288dc7eb5e88ae848aa57f","33689ac745d204a2e5de76bc976c904622508beda9c79f9d64c460ebe934c192","5dd361bcc9bd33af26ff28d321ad0f57457e15b4fab6f124f779a01df0ed02d0","945313edd0703c966421211078911c4832a0d898f0774f049026fc8c9e7d1865","a7d76e0f7eab56618f4671b5462f5c210f3ca813ff266f585bb6a58a85374156","265ceb5184cac76477f5bc2a2bf74c39041c29b33a8eb8bd1ab22d92d6bebaf5")
