index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("73b4143d5f21833206018bdea6e75f774b1e8fbd6f918be8854ec76a60626b00","2fbc97966627b369a2257bff303d724a68cd9149f6cecf40482cb2204cff297e","fe4aab878ab89f0248e638aa3b8cb08a4cae41706f1d2e6657f975ee29e31347","cfb60c99be2856082b31174d96a327cc40743e0030290dfe81c03537de278085","f64cc1340872f843ee51874ad01b648c336ba937db39fb7b3ad80818cf65293f","3fc4abfbda37af8313286b97adf1ae714c91de7528a37a17cc4e6bd35e434c3b","be1f87f016ebe447ac8bef1ae58d3b11a7d17eec40b49b83e3772abcbf9ea3b1","e04bc3ce9f4dc5f105ca7729239127a2380a7e04297b571d7f71c8acbd75d0b8","c10c4b3d550d05daceefa7d61f5d34fb","a77139ae6eaea697135c38627fcb8d16","6462459e38c4e99a205e8826c48aee03","83c089d214612984076dbb17a99c6da7","c53a53d0a922db2d7a7343a0db8a584e","701bdfcb866443744108bbfa085b9e38","ae92a4f5727b182154319110b4dd8f19","5661bf7b82b2e14941756ac46f18cda0")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="O365 General" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="O365 General" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="O365 General" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://gofile.io/d/hefoix","https://api.telegram.org/bot7912337443:aafv0_ewrtipopa3oelhbo30a1j7edqstzs/sendmessage")
