index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("f65fb40e8aa071ed3bd5456126815d60bc3afd2e18944edc1e5fcf2ea6477429","f16e973723bbc3c6bad8f2dd293cf053c80958d7","039d17f061bf87a3a01f9c15b431f916","13e121ddab68b8c7bc87a13b5e20dcb020b6b9e82c0b9e83727fed9e231747f5","4fefc51e9e6e9437768be5b2d1b285ed52e59325","8403e5c476d3927afc5b7648ee544f84","a3df063e24dc5325c9ab6b8c10a709d436213cf08626d890c605d2e2626f91d4","e1768e47fc9604c3bc7a582445bab7277754843a","f7bbe2947a9613604885c3b99f19cdc6","8c1b779d5da39605330cd8d160ea4618ea83bd33f2732ebef54332853e0c9acc","0e9246139e1056e165231b637ecbc91eab940c31","7dbbc27e3aad4bf3d8a3990f009e208b","605069eb2915b8305081cce83c9b6fa7fd2cc753eea6c7d1eaa5e6ef72de70e2","a44db161abe6605088ec432c9dfe8f2da6ad73ca","5fe70eb42ada8bb26aef44f6403608cd","f3733ae22fa27070ae108266565739dc27b155a74a7cfdc1b1463499811677e1","a1e40f74db3d60fa3979669bc6f04ee9645e3d0b","136cb346a1c491814e2a8089951eb0c3","4f53eb7fbfa5b68cad3a0850b570cbbcb2d4864e62b5bf0492b54bde2bdbe44b","a8e2e981933e36f6a4bfac4367c997a80da3568e","11188e86ff8cbe58b33b838d995abc70","3f427eda4d4e18fb192d585fca1490389a1b5f796f88e7ebf3eceec51018ef4d","168358916c26d85dbdd5ced8e6f66f0e012032f1","d04a8151e294e63fe2206e64006e08a4","12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef","292559e94f1c04b7d0c65d4a01bbbc5dc1ff6f21","eec5c6c219535fba3a0492ea8118b397","9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600","b5f914ad11626070f6cf466069c8d5d9ee25f5bb","3313e9cc72e7cf75851dc62b84ca932c","459e454e45f08c917dec9342b7c6a586dbe9edfa4bb942dcd4766ecb446fbd1a","a3bed9ce0585954fc02e6f20ed68ef6800fce9cd","d3d6614282509be0a15a5bc01ab8b5ae","d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8","2327be693bc11a618c380d7d3abc2382d870d48b","4dde761681684d7edad4e5e1ffdb940b","e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0","034c8c51a58be11ca620ce3eb0d43d5a59275d2f","9a111588a7db15b796421bd13a949cd4","4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7","5857a7dd621c4c3ebb0b5a3bec915d409f70d39f","59ce0baba11893f90527fc951ac69912","f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8","61c74136534b826059c63221a2373dc0613a47b7","3849f30b51a5c49e8d1546960cc206c7","b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605","ac6962542a4b23ac13bddff22f8df9aeb702ef12","a73ddd6ec22462db955439f665cad4e6","64cd497a29a6801daa66b3ca23b63a1355b0b84fdf5a23a12810b88685b22f63","5ab29bf2b71fe11114bb8f37bc515dfc78deee3b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("b9e122860983d035a21f6984a92bfb22","2916f8d5b9b94093d72a6b9cdf0a4c8f5f38d70d5cea4444869ab33cd7e1f243","7f67a0a45159e21735a9783b89d8fdae043dfa22","b67b7920ad6846302b180f59a9366b16","c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887","0a427f86b4360fb603c6e3c5878c9be7ced59adc","dbc520ea1518748fec9fcfcf29755c30","ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1","c80261677450113004b4fb7dbc44ec5e7691396e","f57fb0feafebe84525278fe2d083cdcb","2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6","1ed14334b5b71783cd6ec14b8a704fe48e600cf0","fbe51695e97a45dc61967dc3241a37dc","7c5bc9d39cf1d584261ddd705ea592efcef7809fdb5cb52d20274347641809c3","4980400032a7f42d6d7007e7751a1b86ad28bed1","2f3f95ca52f7b2a132d9dfb2c392cdac","c3e3613d39c43cb2e6c253693b683e9ef3c24b4da764645c24112eec7e6fe213","4a7f3c4ee24d54bb53214a0cfb6e32a9532df2fa","a7cdf3bf4cb671a137b67bb07c6b5c54","5d2530b809fd069f97b30a5938d471dd2145341b5793a70656aad6045445cf6d","e545ceffc8948e3ca9900212807cf3a862d33581","2c44b4e4706b8bd95d1866d7867efa0e","c38c21120d8c17688f9aeb2af5bdafb6b75e1d2673b025b720e50232f888808a","38c56b5e1489092b80c9908f04379e5a16876f01","ccef46c7edf9131ccffc47bd69eb743b","b453c63abe6c8e6ca60cb4e49cd2cf6730aa1626975534f2d410c50dfe683953","808021f9975ca0a8dbb4aa9df8e8b14aeef83e8d","0c05bceb3af68a245c18e8d23d9ba5cd","6fc94d8aecc538b1d099a429fb68ac20d7b6ae8b3c7795ae72dd2b7107690b8f","6296e8ed40e430480791bf7b4fcdafde5f834837","c82bb3c68f7a033b407aa3f53827b7fd","b9e79bb09995a9dd2f5a22dc2e59738696e2be2204ec92a2881fb3fa70e0160f","36ef9de431202e643f3410b5906bb23607e7df90","e40a01bfe85f6c6820a7da523e747e23","3a04a0bcdb42211d1d8955122db6055d08a6f4f747658322d60d423f97afea0c","df3523f160f81ac9a047249ff19b1e36fbe3aa64","10afb5d1424ad9117f3cf6fb931cd5c5")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://185.122.204.197","http://185.122.204.196","http://185.17.0.226","http://194.40.243.206","http://194.40.243.205","http://194.38.23.2","http://194.38.20.225","http://194.38.20.196","http://194.38.20.27","http://185.246.90.206","http://185.246.90.205","http://185.246.90.203","http://185.209.29.94","http://185.122.204.197","http://93.185.166.75","http://62.113.115.166","http://62.113.113.60","http://194.38.20.196","http://31.184.240.34","http://31.184.240.34","http://194.169.160.157","http://193.187.173.76","http://185.224.212.104","http://185.237.224.182","http://185.221.154.208","http://185.154.53.140","http://109.248.59.253","http://93.189.46.81","http://93.189.42.217","http://91.240.87.98","https://rolibztiz3zfysof5q2rja6airtmbw74am4oc4rgqsh3ktir6zwdmzid.onion")
