index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("386eb7aa33c76ce671d6685f79512597f1fab28ea46c8ec7d89e58340081e2bd","1a95c0b8046aafa8f943bd6b68f3de550177f8df8c382f12468c4dcb416b12bc","138c82c81ed7b84378a821074c88157c489d29d5ef66080baea88f5de0e865e6","704e6eb9bded6d22feab88fa81e6b0b901bee7a451a290c20527c48c235ebf52","7a25b21df9fa93a694f15d18cd81c9f9be6fc078912924c91c645f75a5966881","1d6aabf2114f9e6367b515d4ebfc6e104511ff4b05bd51a56fa52070c1d40e25","5bedd1b05879b900b60a07abc57fab3075266ee7fa72385ced582699a51f1ec7","49c23a187810edd3c16689ee1766445ec49a7221507dbe51e7b5af8ec46a91ee","e51fc50defd89da446ddc0391e53ace60b016e497c5cb524fd81efdeadda056d","2237e15b094983a79f60bc1f7e962b7fb63aae75cbf5043ee636be4c8fdb9bee","b7f6cf8a6a697b254635eb0b567e2a897c7f0cefb0c0d4576326dc3f0eb09922","1c7e2d6ae46ff6c294885cb7936c905f328b303d6f790b66d7c4489f284c480a","c3ae09887659cde70d636157c5a0efd36359efdfb2fe6a8e2cdd4e5b37528f51","fa7eee6e322bfad1bb0487aa1275077d334f5681f0b4ede0ee784c0ec1567e01","d274190a347df510edf6b9a16987cea743d8df0e4c16af10787a31f0fec66da2","20c767d32304ed2812ed8186dc14ddaaae581481c6dee26447a904fcaa67db2a","cf5537af7dd1d0dbb77e327474aa58b2853cb1a1d4190991ac3d9ca40b7841aa","df9a2471c23790a381e286bb96ea3401b94686b7ca067297a7920a76a7202112","05fb86d34d4fa761926888e5347d96e984bbb1f3b693fe6c3ab77edb346f005b","aba3e885768a6436b3c8bc208b328620f001c63db7a3efe6142e653cdf5dfbf7","0f81c3850bc82a7d1927cf16bfad86c09414f8be319ef84b44a726103b7d029d","9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff","12534f7014b3338d8f9f86ff1bbeacf8c80ad03f1d0d19077ff0e406c58b5133","23d0eff3c37390d38e6386a964c88ac2dafbace92090a762ae9e23bd49510f09","3e53deb5d2572c0f9fae10b870c8d4f5fdc7bd0fe1cc3b15ca91b31924373136","2f1520301536958bcf5c65516ca85a343133b443db9835a58049cd1694460424","912018ab3c6b16b39ee84f17745ff0c80a33cee241013ec35d0281e40c0658d9","38d4456b38a2896f23cad615e3c9167e65434778074a9b24af3cbc14d1e323bf","77358157efbf4572c2d7f17a1a264990843307f802d20bad4fb2442245d65f0b")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("88.218.193.76","8.214.122.199","103.56.114.69","27.124.17.222","27.124.3.96")
