index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c306254b44d825e008babbafbe7b07e20de638045f1089f2405bf24e7ce9c0dc","00309d22ab53011bd74f4b20e144aa00bf8bb243799a2b48f9f515971c3c5a92","32c818f61944d9f44605c17ca8ba3ff4bd3b2799ed31222975b3c812f9d1126c","81828762ebe7ea99b672c8ac07dc3c311487a5a246db494c7643915f6c673562","d1a0a2dc26603b2e764ee9ab90f3f55a2f11a43e402dd72f4a32a19b0ac414b5","ae974e5c37936ac8f25cfea0225850be61666874","e9b52a4934b4a7194bcbbe27ddc5b723113f11fe","9bc1972a75bb88501d92901efc9970824e6ee3f5","f91d3c1c2b85727bd4d1b249cd93a30897c44caa","46ca0c5ad4911d125a245adb059dc0103f93019d","28f73b38ace67b48e525d165e7a16f3b51cec0c0","bdb0c0282b303843e971fbcd6d2888d834da204c","5ffac9dff916d69cd66e91ec6228d8d92c5e6b37","6960beedbf4c927b75747ba08fe4e2fa418d4d9b","665572b84702c4c77f59868c5fe4d0b621f2e62a","a67686b5ce1d970a7920b47097d20dee927f0a4d","14e4557ea8d69d289c2432066d860b60a6698548","0f20e5ccdbbed4cc3668577286ca66039c410f95")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://dfpc7yvle5kxmgg6sbcp5ytggy3oeob676bjgwcwhyr2pwcrmbvoilqd.onion/")
