index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("7a6b87a7ba79160232579157b8ebcaea7660392d98cb6b8b3d562a383a0894bc","5e44f769aa9a745ade82589bbbd17c3687f2fb7c08b1043d8c5c44d28eaa20a9","fe1c8b01f5abc62551b0a3f59fe1675c66dd506d158f5de495a5d22d7445e6e9","fa9cb5608841f023052379818a9186496526039bc47cac05a6866f5fb0e70fc5","080fcc70c11248eaf34bd30c0dc9800b0b1742fe92c96c9995a1c73c0adf2336","465a59b7a97364bc933703a8fda715090c6a927f814bc22a0057e6a7134cb69f","5e082d1c85e591aebb380d7d7af56000ac0ef5fc32e216cb5fe7027bb9861743","f59dc209ee236e5ed78f83117865164e57a223f742c75f57c20d3da4cbe179e0","f32b0d71274ea93f27527079371e5e926e8d6a6f29d84ac602e48da0332c9f4c","8248432bcba6e8bb8731c0b8f2fbe4aae2e2d0fee2157477c83343743c39c1a8","06064b3b0158efbfa9d849c853a9783c7e9d07c5924275d0d33c6ac74c78eec7","886c5883113d279d97caaca2714860dfceb421c7297dbb3ee04a00b7d50b821b","b9584cf67e73a759d6c412962d4a9d7471c703f72e056cd24742a4b78c68ff2d")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("107.173.143.111")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Microsoft Windows" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Network Access Control / NAC" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Virtualization / Containers" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Access / Privileged User" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Access / Identity Management" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Identity Access Management" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Authentication / WiFi" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://drive.Google.com/u/0/uc?id=1nU6-jGVnOKeZofflu8hfx2t83lAB9TPI&export=download","https://pastebin.com/raw/DDTVwwbu")
