index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "api.private-chatting.com" OR destinationhostname CONTAINS "apps-analyser.com" OR destinationhostname CONTAINS "wmail-blog.com" OR destinationhostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "api.private-chatting.com" OR sourcentdomain CONTAINS "apps-analyser.com" OR sourcentdomain CONTAINS "wmail-blog.com" OR sourcentdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "api.private-chatting.com" OR sourcehostname CONTAINS "apps-analyser.com" OR sourcehostname CONTAINS "wmail-blog.com" OR sourcehostname CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "api.private-chatting.com" OR destinationntdomain CONTAINS "apps-analyser.com" OR destinationntdomain CONTAINS "wmail-blog.com" OR destinationntdomain CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "api.private-chatting.com" OR requesturl CONTAINS "apps-analyser.com" OR requesturl CONTAINS "wmail-blog.com" OR requesturl CONTAINS "wmail-service.com")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a","0bad2617ddb7586637ad81aaa32912b78497daf1f69eb9eb7385917b2c8701c2","0cb5c69e8e85f44725105432de551090b28530be8948cc730e4b0d901748ff6f","23b9075dac7dbf712732bb81ecd2c21259f384eb79ae8fdebe29b7c5a12d0519","5c5202ed975d6647bd157ea494d0a09aac41d686bcf39b16a870422fa77a9add","3fe448df20c8474730415f07d05bef3011486ec1e070c67683c5034ec76a2fcb","0de9a23f88b9b7bda3da989dce7ad014112d88100dceaabca072d6672522be26","1d6845c7b92d6eb70464a35b6075365872c0ae40890133f4d7dd17ea066f8481","7107ab14a1760c6dccd25bf5e22221134a23401595d10c707f023f8ca5f1b854","ddee23e2bfd6b9d57569076029371e6e686b801131b6b503e7444359d9d8d813","947215a1c401522d654e1d1d241e4c8ee44217dacd093b814e7f38d4c9db0289","7b75c1150ef10294c5b9005dbcd2ee6795423ec20c512eb16c8379b6360b6c98","d7dfc84af13f49e2a242f60804b70f82efff7680cddf07f412667f998143fe9c","4da1352e3415faa393e4d088b5d54d501c8d2a9be9af1362ca5cc0a799204b37","705deecbbb6fd4855df3de254057c90150255c947b0fb985ea1e0f923f75a95f")
