index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("db15a69d0ca99a99a6c6771ab9598bf8d93d29d036eff64f52dc262048bd8e39","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","92fbfa17b4dd1c0353ef4d7bfb5649c3a916c4e2e58303538f83db65cc709b82","8e7eb07f9e6ff4d5e7db3dcf8bcbf909693cce12693a43c1ddd8b221cdf3a9e8","0f21a4ba2842f4d7f62fd2c2ca30cacf6aca7b8eaeb9d636c8b1c97ce925e46a","0d7a1679cde49c8c43a7140166c7c5077a20b93ead7359704a48850a13d534e5","80fb32f8dbf88b78818f619e81a9fc12e3496e2f38a2a8b3a692752c53d38c4d","796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5","93439fe9b45d7b6e9fcdc5e68fd47677ea17025e4eabb6f1468cb9ae98ee8a5b","e8e73adc7ba9f04cc0e1e0f403730ff790a7ff463cda8aaca5cbb6305bb7878e","4ef76b942e041c20fd58858d73b4180688c828608d42604eabf41821981ce997","70f551ccf085df38fec1bbe676814b1ce148a7320a3dfb89b85d975add56edb9","15afec306455f3fc70738c6efcb8bca161fda013a8ae4cc4b3a8147741d0cb46","00618af73c6963ea6e002a75c18eb2ea4e7e39b8aaf008e7cf3289c18d46a961","d03d6785ca26c530dd3b43c9d75a576e2b1951523566b5de41aefdca1a9489a4","89ba909b743f9dee82f65586b62d258c2fd3992ed7367483f9754d9826912fe7","2cf4654964586aa6b4ce844121048e77881bcda3e7d6931e9608d41af3ee68da","b87676d267712ec64e015c7a1aa689cd951a581841db4208a758aa1c0b16b68f")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://store5.gofile.io/download/direct/d29b9954-3e20-4d08-ab01-41ed028faa14/file2.zip","https://rentry.co/puttytest10/raw")
