index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationhostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationhostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcentdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcentdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR sourcehostname CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR sourcehostname CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "ygo44wtbprhx2kvibtgjj3rrjo3f4fccuhuavy6vnvtrvihpruqdjuad.onion" OR destinationntdomain CONTAINS "pmbvfcoawmpkpqtcrv3fmtqyvxufbpiidrseseypvxrmlbh727aoqmyd.onion" OR destinationntdomain CONTAINS "ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("117fc30c25b1f28cd923b530ab9f91a0a818925b0b89b8bc9a7f820a9e630464","93d0cc8492511c663f17544b3bf14eab8ccb492909536e79ef652921d809bb1a","e4a319f7afafbbd710ff2dbe8d0883ef332afcb0363efd4e919ed3c3faba0342","28aeb2d6576b2437ecab535c0a1bf41713ee9864611965bf1d498a87cbdd2fab")
