index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationhostname CONTAINS "status.s3cloud-azure.com" OR destinationhostname CONTAINS "us2.s3bucket-azure.online" OR destinationhostname CONTAINS "static.trendmicrotech.com" OR destinationhostname CONTAINS "rocean.oca.pics" OR destinationhostname CONTAINS "static.krislab.site" OR destinationhostname CONTAINS "ms1.hinet.lat" OR destinationhostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcentdomain CONTAINS "status.s3cloud-azure.com" OR sourcentdomain CONTAINS "us2.s3bucket-azure.online" OR sourcentdomain CONTAINS "static.trendmicrotech.com" OR sourcentdomain CONTAINS "rocean.oca.pics" OR sourcentdomain CONTAINS "static.krislab.site" OR sourcentdomain CONTAINS "ms1.hinet.lat" OR sourcentdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR sourcehostname CONTAINS "status.s3cloud-azure.com" OR sourcehostname CONTAINS "us2.s3bucket-azure.online" OR sourcehostname CONTAINS "static.trendmicrotech.com" OR sourcehostname CONTAINS "rocean.oca.pics" OR sourcehostname CONTAINS "static.krislab.site" OR sourcehostname CONTAINS "ms1.hinet.lat" OR sourcehostname CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR destinationntdomain CONTAINS "status.s3cloud-azure.com" OR destinationntdomain CONTAINS "us2.s3bucket-azure.online" OR destinationntdomain CONTAINS "static.trendmicrotech.com" OR destinationntdomain CONTAINS "rocean.oca.pics" OR destinationntdomain CONTAINS "static.krislab.site" OR destinationntdomain CONTAINS "ms1.hinet.lat" OR destinationntdomain CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "speedshare.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "360photo.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "bobs8.oss-cn-hongkong.aliyuncs.com" OR requesturl CONTAINS "status.s3cloud-azure.com" OR requesturl CONTAINS "us2.s3bucket-azure.online" OR requesturl CONTAINS "static.trendmicrotech.com" OR requesturl CONTAINS "rocean.oca.pics" OR requesturl CONTAINS "static.krislab.site" OR requesturl CONTAINS "ms1.hinet.lat" OR requesturl CONTAINS "msa.hinet.ink")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("916f3f4b895c8948b504cbf1beccb601ff7cc6e982d2ed375447bce6ecb41534","4edc77c3586ccc255460f047bd337b2d09e2339e3b0b0c92d68cddedf2ac1e54","6be4dd9af27712f5ef6dc7d684e5ea07fa675b8cbed3094612a6696a40c664ce","1e6c661d6981c0fa56c011c29536e57d21545fd11205eddf9218269ddf53d448","4ad078a52abeced860ceb28ae99dda47424d362a90e1101d45c43e8e35dfd325","04b336c3bcfe027436f36dfc73a173c37c66288c7160651b11561b39ce2cd25e","c78a02fa928ed8f83bda56d4b269152074f512c2cb73d59b2029bfc50ac2b8bc","1c13e6b1f57de9aa10441f63f076b7b6bd6e73d180e70e6148b3e551260e31ee","9b50e888aaec0e4d105a6f06db168a8a2dcf9ab1f9deeff4b7862463299ab1ca","d23dd576f7a44df0d44fca6652897e4de751fdb0becc6b14b754ac9aafc9081c","d3c1ada67f9fe46dfb11f72c1754667d2ccd0026d48d37b61192e3d0ef369b84","e9854ab68dad0a744925118bfae4ec6ce9c4b7727e2ad6763aa50b923991de95","b3b8efcaf6b9491c00049292cdff8f53772438fde968073e73d767d51218d189","cef0d2834613a3da4befa2f56ef91afc9ab82b1e6c510d2a619ed0c1364032b8","061bcd5b34c7412c46a3acd100167336685a467d2cbcd1c67d183b90d0bf8de7","1c26d79a841fdca70e50af712f4072fea2de7faf5875390a2ad6d29a43480458")
