index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f6456454be8cb77858d24147b1529890cd06d314aed70c07fc0b5725ac84542b","7709a06467b8a10ccfeed72072a0985e4e459206339adaea3afb0169bace024e","41b37de3256a5d1577bbed4a04a61bd7bc119258266d2b8f10a9bb7ae7c0d4ec","725bdf594baa21edf1f3820b0daf393267066717832452598c617552a004e5da","01ca3f6dc5da4b98915dd8d6c19289dcb21b0691df1bb320650c3eb0db3f214c","57cc5e44fd84d98942c45799f367db78adc36a5424b7f8d9319346f945f64a72","a8c062846411d3fb8ceb0b2fe34389c4910a4887cd39552d30e6a03a02f4cc78","c45bffb5fe7056075b966608e6b6bf82102f722b5c5d8a9c55631e155819d995","dd28806d63f628dbc670caaa67379da368e62fa9edfbdfd37d3a91354df08e1c","c0d5043b57a96ec00debd3f24e09612bcbc38a7fb5255ff905411459e70a6bb4","28de2ccff30a4f198670b66b6f9a0ce5f5f9b7f889c2f5e6a4e365dea1c89d53","f09fa790f8b3bf59f44093ae18e8c9ec95b54fb8dab5039e9bfd09b12b815950","6710d037801471826817596fa71637eecda4f58cddf47bbb48b3984b21582721","141ae6d29118b099d5ef8ee0daa7a4714447d5aa13ce43563e21900014f1db7d","ada1e14da19338f2fa009254a993c6b6607e9a328499c3a762d6652ca8edee5e","49218f19e3dc89ab2698f9e23f37d16a97b410de91226bb24e65c8392b74de93","4cddb6a4fbf8771ee3180b974fc12c8261880a213a4bf36b1e910e1c1df847cf","5987f958d758866ccea33437c53276382f9c362fc33e81d342b616dc70aeb78f","7ea6cb74238d3f0099d4b9c42dd7301b9fb903b62f1f2e06ef73ade533691a69","6e4e195c2d60aec5a75f287f2b27ade3204390ace9ad4dec07753234fb148b57","6b84eebded654d29b63f931a28e5fc4318aaf32604d1ad2f14e4a87b7a499206","f1651ffda0d45e6c37cd31c0ed83d9bd08c33acbd3647cbdd8b22b804ce8d6a3","009df256bce5971edaab72c19c4ebcc9296e203a2ef447557c0796d86217d1d3","5a9b1bf53e47cbecf41259f31d06f86dcf62b7858debd680c0a232de3577669a","4f85a533e6d25fb281639f9fb4b4f817faab2b291a7835c267f29c27728247f9","435f61ad26b729e1d7813454ff8279c52ebd928a3d1dd824cb9267189991565d","a81d2c633e938a04f486dea3b245e87dc498bc02","9f9a5e7c24f8f2ab030ce875736d80e541156003","85f1e02cb5f5c38b848c282187c3ceee7d544e13","b3adc3d81853185f65dbd278fbba7f795e4a3259","914a8da21feaab56fecbdc997710566775850617","affe20def567eb63447f2a3aad3927d52384db59","26ed903a997d8f9dfee10435e8930a9b24bd46f9","2b5056c31ca2a54e6bccc1912eee522dcf16cd94","71028a08ec0d64dff36cf5405997501278b949f9","78b4ba41d2de822061d1f3e0c43d13d564f10871","b785169c5fbaff8e205d6d58783706fc07208d59","48b110b088d4fd8381990dbd6cbb23abeb87b422","6df60e871d14996c4826a8c2355d64d3aabbfab6","82a0d684a1e144a7f9f874e652597155bb12ae92","a8e7784df801cea9cb6278762437314bb42d1966","72c4fe68520c0307367b0865b29215d1fc6e2c32","1d64ddd5a2c0fae5817235ab9ddf334f","e66136da3bb11795da64f038ec4610b8","eb51402e73a86800cdce3a50c9c804fe","f7b0da0dca597f3e61f53000814f8148","96be653e085046ed518ad3ce48fc4190","d16f4bf877445e9fca422dc736db64cf","949cc35be1b366eaad94ea03cf862d6e","88fd6260d23f01213d3e2abee74db4a2","5816f687ce49588aae2584bb5e9f652f","12a172b74d0c080217bf0b883c109a6b","b78483179f85d3c8e23733ebd114e10e","bddebaea4bf45f6b464d68a7b8e07b92","aba932b87072f479445a323b183cc29b","381bb58655a194e75763fb01a36e5c7b","b8045bebc39a8fff666803a5163173d8","6a1dca07dafd2eebd99aba7c31ace928","b98a24144067ec3605e84158e12d6498222295ae","f39c5689887f5b94741e285cd867e1475111499e","5c0e8bd70e2dd49d45937ccc3f38de61d356384c","40dc7101e1991672b5f60523e69ed5787a9dc4fa","cc9f460e593522e57b66fed9a34d3ba332391165","930e4757740aaefd9cb567faf301816fbe37c1c3","e3712e3d818e63060e30aec2a6db3598cbf0db92","e45aeccb798f5cf6cb5d877821d1f4aa7f55cf6f","aba938bf8dc5445df3d5b77a42db4d6643db4383","45b50d42e8d827ca0373c12533211c33","55748b22a52823a3ccb5d8b106826cec4ae177a37658c82adad3265ad3cce662","14c095de9da5fbba5548d9fea65c8b2d","db998d8182f4afd9f42bb289c508a1f3","c711036ef1805fea9dc2c8e633b961fd","b7bc6a853f160df2cc64371467ed866d","651d72776c0394693c25b1e3c9ec55d0","bdf188b3d0939ec837987b4936b19570")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://official-updates.info/office/Default.dotm","https://dl.dropboxusercontent.com/s/psmt483ybusajvy/Turkey.docx?dl=0","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/EdPEtAGapngkNtLLFCee","https://u1ndk6f4nf.execute-api.us-east-1.amazonaws.com/page/zhUezQeFqaDRmxWaHfVz","https://s3.amazonaws.com/2v63r9egi46/mvhg5dhdbsolshpq","https://s3.amazonaws.com/2v63r9egi46/hgn8fdsf512fsc5","https://drive.google.com/uc?export=download&id=13_PT71n8Ujl2lSTcQcyFJ4TNetI-wvDf&dID=1645099370036&linkName=Download%20File","http://office-updates.info/2022/Details.dotm","http://office-updates.info/static/admin/storage/Arabic.dotm","http://office-updates.info/static/admin/storage/Details.dotm")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("51.38.87.253","138.201.145.183")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Microsoft Windows" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Microsoft Windows" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Microsoft Windows" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Microsoft Windows" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / VPN" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / VPN" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / VPN" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / VPN" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Content Management System" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Content Management System" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Content Management System" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Content Management System" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Virtualization / Containers" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Virtualization / Containers" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Access / Privileged User" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Access / Privileged User" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Access / Privileged User" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Access / Privileged User" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Access / Identity Management" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Access / Identity Management" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Access / Identity Management" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Access / Identity Management" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Identity Access Management" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Identity Access Management" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Identity Access Management" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Identity Access Management" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / WiFi" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / WiFi" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "official-updates.info" OR destinationhostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "official-updates.info" OR sourcentdomain CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "official-updates.info" OR sourcehostname CONTAINS "office-updates.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "official-updates.info" OR destinationntdomain CONTAINS "office-updates.info")
