index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "qwavemediaservice.net" OR destinationhostname CONTAINS "mirzadihatti.com" OR destinationhostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "qwavemediaservice.net" OR sourcentdomain CONTAINS "mirzadihatti.com" OR sourcentdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "qwavemediaservice.net" OR sourcehostname CONTAINS "mirzadihatti.com" OR sourcehostname CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "qwavemediaservice.net" OR destinationntdomain CONTAINS "mirzadihatti.com" OR destinationntdomain CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "qwavemediaservice.net" OR requesturl CONTAINS "mirzadihatti.com" OR requesturl CONTAINS "coauthcn.com")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5f663f15701f429f17cc309d10ca03ee00fd20f733220cc9d2502eff5d0cd1a1","eb7aebded5549f8b006e19052e0d03dc9095c75a800897ff14ef872f18c8650e","cac239cf09a6a5bc1f9a3b29141336773c957d570212b97f73e13122fe032179","8d2f6b0d7a6a06708593cc64d9187878ea9d2cc3ae9a657926aa2a8522b93f74","33905e2db3775d2e8e75c61e678d193ac2bab5b5a89d798effbceb9ab202d799","5c85194ade91736a12b1eeeb13baa0b0da88c5085ca0530c4f1d86342170b3bc","ef4fb1dc3d1ca5ea8a88cd94596722b93524f928d87dff0d451d44da4e9181f1","b2566755235c1df3371a7650d94339e839efaa85279656aa9ab4dc4f2d94bbfa","33a20950e7f4b2191706ddf9089f1e91be1e5384cca00a57cf6b58056f70c96b","7e7e90b076ef3ea4ef8ed4ef14fb599a2acb15d9ce00c78e5949186da1e355cf","07504fcef717e6b74ed381e94eab5a9140171572b5572cda87b275e3873c8a88","06b4c1f46845cee123b2200324a3ebb7fdbea8e2c6ef4135e3f943bd546a2431","ded0635c5ef9c3d63543abc36a69b1176875dba84ca005999986bd655da3a446")
