index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("62e9d5b3b4d5654d6ec4ffdcd7a64dfe5372e209b306d07c6c7d8a883e01bead","6962e408aa7cb3ce053f569415a8e168a4fb3ed6b61283c468f6ee5bbea75452","981e6f2584f5a4efa325babadcb0845528e8147f3e508c2a1d60ada65f87ce3c","98266835a238797f34d1a252e6af0f029c7823af757df10609f534c4f987e70f","ad635630ac208406cd28899313bef5d4e57dba163018dfb8924de90288e8bab3","b6ed0a10e1808012902c1a911cf1e1b6aa4ad1965e535aebcb95643ef231e214","b89742731932a116bd973e61628bbe4f5d7d92b53df3402e404f63003bac5104","d931fe8da243e359e9e14f529eafe590b8c2dd1e76ca1ad833dd0f927648f88b","ec2a22d92dd78e37a6705c8116251fabdae2afecb358b32be32da58008115f77","f9c6dca22e336cf71ce4be540905b34b5a63a7d02eb9bbd8a40fc83e37154c22","09c99e37121722dd45a2c19ff248ecfe2b9f1e082381cc73446e0f4f82e0c468","4cae449450c07b7aa74314173c7b00d409eabfe22b86859f3b3acedd66010458","78147d3be7dc8cf7f631de59ab7797679aba167f82655bcae2c1b70f1fafc13d","cb408d45762a628872fa782109e8fcfc3a5bf456074b007de21e9331bb3c5849","259670303d1951b6b11491ddf8b76cad804d7a65525eac08a5b6b4473b42818b","48301f37e92a9d5aa29710bda4eee034dd888a3edd79e2f74990300ffd8eb3b6","48460c9633d06cad3e3b41c87de04177d129906610c5bbdebc7507a211100e98","4b8103cd9fbb0efb472cbf39715becacf098f7ee44bf98f6672278e4e741542b","5c3569c166654eed781b9a2a563adec8e2047078fdcbafcdef712fabf2dd3f57","5ccf8c6bf9c39ccb54c5ebabd596a1335da522d70985840036e50e3c87079ab4","335d1c6a758fcce38d0341179e056a471ca84e8a5a9c9d6bf24b2fb85de651a5")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://iq3ahijcfeont3xx.sm4i8smr3f43.com","https://iq3ahijcfeont3xx.tor2web.blutmagie.de","http://iq3ahijcfeont3xx.fenaow48fn42.com","http://iq3ahijcfeont3xx.sm4i8smr3f43.com")
