index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("27a11c59072a6c2f57147724e04c7d6884b52921da2629fb0807e0bb93901cbc","3cd7f621052919e937d9a2fdd4827fc7f82c0319379c46d4f9b9dd5861369ffc","c3df16cce916f1855476a2d1c4f0946fa62c2021d1016da1dc524f4389a3b6fa","e15f1a6d24b833ab05128b4b34495ef1471bd616b9833815e2e98b8d3ae78ff2","dae3c08fa3df76f54b6bae837d5abdc309a24007e9e6132a940721045e65d2bb","8404f8294b14d61ff712b60e92b7310e50816c24b38a00fcc3da1371a3367103","8e6d7c44ab66f37bf24351323dc5e8d913173425b14750a50a2cbea6d9e439ba","fa6cdd1873fba54764c52c64eadca49d52e5b79740364ef16e5d86d61538878d","0e7b65930bc73636f2f99b05a3bb0af9aaf17d3790d0107eb06992d25e62f59d","c9ffbe942a0b0182e0cd9178ac4fbf8334cae48607748d978abf47bd35104051","04769b75d7fb42fbbce39d4c4b0e9f83b60cc330efa477927e68b9bdba279bb8","7da82e14fb483a680a623b0ef69bcfbd9aaaedf3ec26f4c34922d6923159f52f","c26b62fa593d6e713f1f2ccd987ef09fe8a3e691c40eb1c3f19dd57f896d9f59","1dfe65e8dc80c59000d92457ff7053c07f272571a8920dbe8fc5c2e7037a6c98","a8ada7532ace3d72e98d1e3c3e02d1bd1538a4c5e78ce64b2fe1562047ba4e52","cc9e5d8f0b30c0aaeb427b1511004e0e4e89416d8416478144d76aa1777d1554","ec80e96e3d15a215d59d1095134e7131114f669ebc406c6ea1a709003d3f6f17","8e7fb9f6acfb9b08fb424ff5772c46011a92d80191e7736010380443a46e695c","b13b83b515ce60a61c721afd0aeb7d5027e3671494d6944b34b83a5ab1e2d9f4","af3d740c5b09c9a6237d5d54d78b5227cdaf60be89f48284b3386a3aadeb0283","4f17a7f8d2cec5c2206c3cba92967b4b499f0d223748d3b34f9ec4981461d288","22ba8c24f1aefc864490f70f503f709d2d980b9bc18fece4187152a1d9ca5fab","148a42ccaa97c2e2352dbb207f07932141d5290d4c3b57f61a780f9168783eda","7084f06f2d8613dfe418b242c43060ae578e7166ce5aeed2904a8327cd98dbdf","ab0ad77a341b12cfc719d10e0fc45a6613f41b2b3f6ea963ee6572cf02b41f4d","6b290953441b1c53f63f98863aae75bd8ea32996ab07976e498bad111d535252","cc84bfdb6e996b67d8bc812cf08674e8eca6906b53c98df195ed99ac5ec14a06","fbf1bae3c576a6fcfa86db7c36a06c2530423d487441ad2c684cfeda5cd19685","a3ec2992e6416a3af54b3aca3417cf4a109866a07df7b5ec0ace7bd1bf73f3c6")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="O365 General" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="O365 General" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="O365 General" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="O365 General" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="O365 General" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="O365 General" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="O365 General" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="O365 General" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="O365 General" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="O365 General" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="O365 General" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="O365 General" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="188.127.225.191" AND destinationport=443 OR destinationaddress="94.198.52.200" AND destinationport=443 OR destinationaddress="91.219.148.93" AND destinationport=443 OR destinationaddress="185.244.180.169" AND destinationport=443 OR destinationaddress="109.172.85.95" AND destinationport=443 OR destinationaddress="185.231.155.111" AND destinationport=443 OR destinationaddress="185.173.37.67" AND destinationport=443 OR destinationaddress="188.127.227.226" AND destinationport=443 OR destinationaddress="62.113.114.209" AND destinationport=443 OR destinationaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="188.127.225.191" AND sourceport=443 OR sourceaddress="94.198.52.200" AND sourceport=443 OR sourceaddress="91.219.148.93" AND sourceport=443 OR sourceaddress="185.244.180.169" AND sourceport=443 OR sourceaddress="109.172.85.95" AND sourceport=443 OR sourceaddress="185.231.155.111" AND sourceport=443 OR sourceaddress="185.173.37.67" AND sourceport=443 OR sourceaddress="188.127.227.226" AND sourceport=443 OR sourceaddress="62.113.114.209" AND sourceport=443 OR sourceaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="188.127.225.191" AND sourceport=443 OR translatedipaddress="94.198.52.200" AND sourceport=443 OR translatedipaddress="91.219.148.93" AND sourceport=443 OR translatedipaddress="185.244.180.169" AND sourceport=443 OR translatedipaddress="109.172.85.95" AND sourceport=443 OR translatedipaddress="185.231.155.111" AND sourceport=443 OR translatedipaddress="185.173.37.67" AND sourceport=443 OR translatedipaddress="188.127.227.226" AND sourceport=443 OR translatedipaddress="62.113.114.209" AND sourceport=443 OR translatedipaddress="96.9.125.168" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND destinationtranslatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND destinationtranslatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND destinationtranslatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND destinationtranslatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND destinationtranslatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND destinationtranslatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="188.127.225.191" AND translatedport=443 OR destinationtranslatedaddress="94.198.52.200" AND translatedport=443 OR destinationtranslatedaddress="91.219.148.93" AND translatedport=443 OR destinationtranslatedaddress="185.244.180.169" AND translatedport=443 OR destinationtranslatedaddress="109.172.85.95" AND translatedport=443 OR destinationtranslatedaddress="185.231.155.111" AND translatedport=443 OR destinationtranslatedaddress="185.173.37.67" AND translatedport=443 OR destinationtranslatedaddress="188.127.227.226" AND translatedport=443 OR destinationtranslatedaddress="62.113.114.209" AND translatedport=443 OR destinationtranslatedaddress="96.9.125.168" AND translatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="78.128.112.209" AND sourceport=10443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationport=10443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND destinationtranslatedport=10443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="78.128.112.209" AND translatedport=10443)
