index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("23d99f912f2491749b89e4fd337273bc","24c72ffef74be81c5a7d4cb024110328","27ead4c13658c38b9ef59e201657eabd","4055d8b5c2e909f5db8b75a5750a7005","43b851109fc2d534e2ac5d157f90fe65","aba760ec55fdeccb35adb068443feb89","b181ecbb7394e3b1394a8c97af65b7e2","c381c2cb8fdd6acf1636280b9424f573","ef6ec560efd05d21976a6fd3f489e206","064eab6bff1b47eb92cbf1ed35f57098e5e686b2","0fc0e1ab30f55d1709532496ac6adac107a4729e","18a6ee322f30fe17f896686fbc162e4c8d628e5a","5319b30153188163961250027e1eae780e44ff30","6fb8b0e4e31f678f53b22e7b8a1b70f0deef1545","7918e2c9c6f2847078bb736968f8f21b7e70a0af","8103cbffd4f7651c32a1cc602f0398027fb3207f","892fedae59b274ca24916de33650d318168ce335\n99ead1a4c767d8f201d538097762740b0765d1c7","cc7afffdb88729a5e977fa8f75a898d09624f54a","d005ebee72feb5ac50ee81e872665cae32d6c1c9","09e09503962a2a8022859e72b86ad8c69dcbf79839b71897c0bf8a4c4b9f4dd6","165a80f6856487b3b4f41225ac60eed99c3d603f5a35febab8235757a273d1fd","2722e289767ae391e3c3773b8640a8b9f6eb24c6a9d6e541f29c8765f7a8944b","31591fcf677a2da2834d2cc99a00ab500918b53900318f6b19ea708eba2b38ab","326dd85d76d33f3f04cbe7eef6d10ea73f800c84bfc3ed6f3963403c981bbb6e","4b41b605ffc0e31bd9d460d5a296ac6e8cfd56a215dc131e90ec2654f0ffe31b","5d7eb6c36d261adeef1a59bde9eb965f5d8d7f56a2e607da913e782167ba6cb6","7daab239271e088f04cae95627cc0066f48a1b178a1ff60b1140aa729126e928","7e6a5e32596b99f45ea9099a14507a82c10a460c56585499d7cd640f2625567f","85103955e35a1355ce68a92eaedd8f9376de1927d95bf12657b348dea6a8077b","900d08037d303d9b3d4a855e1a97d1f9283c28fe279e67eefe9997f856eeb439","9b49d6640f5f0f1d68f649252a96052f1d2e0822feadd7ebe3ab6a3cadd75985","bab601635aafeae5fbfe1c1f7204de17b189b345efd91c46001f6d83efbb3c5a","cc8be1d525853403f6cfabcf0fc3bd0ca398ece559388102a7fc55e9f3aa9b33","d22fd0cdd6ace24e117d7330e9996a2809c2c2cb280b12f9ea43c484d2bfcfd4","ec553e14b84ccca9b84e96a9ed19188a1ba5f4bf1ca278ab88f928f0b00b9bd0","f17f6866f4748e6e762752062acdf983d3b083371db83503686b91512b9bcae3","f9c1a117de8519060a3bf189e72277e895345b8fece73fc0d750946c7f288367","fb58c54a6d0ed24e85b213f0c487f8df05e421d7b07bd2bece3a925a855be93a")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/892fedae59b274ca24916de33650d318168ce335.zip","https://v2uploads.zopim.io/2/u/k/2ukm8mhn4whvqm9pjhrjaogyoyub9ouo/064eab6bff1b47eb92cbf1ed35f57098e5e686b2.msi","https://ln5.sync.com/dl/cc84c9a40/grefpuhc-p9kmxpkx-kw6waakz-e8xp8atm","https://ws.onehub.com/files/x68hqy91","https://megolan.egnyte.com/","https://kinneretacil.egnyte.com/","https://rimonnet.egnyte.com/")
