index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0b28025eba906e6176bcd2be58e647beebc92680d1c8e9507662a245bab61803","1408a28599ab76b7b50d5df1ed857c4365e3e4eb1a180f126efe4b8a5a597bc6","2345c426c584ec12f7a2106a52ce8ac4aeb144476d1a4e4b78c10addfddef920","2c28a59408ee8322bc6522734965db8261c196bf563c28dd61d5b65f7fd9a927","399bf858d435e26b1487fe5554ff10d85191d81c7ac004d4d9e268c9e042f7bf","4496fb2e42bb8734d4d5c6c40fa6e5f7afa00233ffa1c9e4b00e1ef4fd7849ad","5921d1686f9f4b6d26ac353cfce3e85e57906311a80806903c9b40f85429b225","619c185406e6272ba8ac70ad4c6ff2174e5470011c5737c6c2198cd69d86ec95","7248217c106dfa048a9e5593cba257fd5189877c490f7d365156e55880c5ddca","83ef976a3c3ca9fcd438eabc9b935ca5d46a3fb00e2276ce4061908339de43ec","87756cb5e33f7fb7c2229eb094f1208dbd510c9716b4428bfaf2dc84745b1542","9d467226a59d8f85a66b2a162f84120811d437a40eb6a7c60fad546500094ab7","a6aabc68245dde1eda2093c6ef4b75b75f99d0572c59d430de9cef527dc037cb","da606c49044ca3055028011f8e384f7ede569d337e08c191e723c9798f0610d9","db7f4aa246bd17971e75d7b79f506b3c87f9f2a42a3b5dadd56dd848ac34a9c7","e94bcaf0d01fcd2f76f1c08575c3ec6315508cdbf72684a180c6992c68b10cc3","f08e669b6caf8414b2da8e2a0fea18f79b154d274aa4835cffdfa592844da239")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://45.204.1.248:55589/","https://43.229.155.38:8443/")
