index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("1e9a4e774b61acc8a6b35ee50417e661","47d59d38fb9a26dad325bd260fedd50c","4f795ac235a6e235a7ccfd688c927d5b","98462944e128fb7660359bfa3e2cece4eaf5b88b","9d4e888f9bb2182db1f91d36a0be457685a75b11","b7522d2f1fb7b9b92348b4d88c62480683d3485c","14c270cf53a50867e42120250abca863675d37abf39d60689e58288a9e870144","2ae6c5c2b71361f71ded4ad90bbf6ef0b0f4778caf54078c928e2017302fbe69","638c7a4f833dc95dbab5f0a81ef03b7d83704e30b5cdc630702475cc9fff86a2","77cb08c7889c7b0d443aeacfdcbc1cc6745d3e3441f4b42ddbf7fde6113491ae","c2f95299d8aa912e1b753f3f0780a00ea6e8b5dab0245d77fcf3b6499677c328","c6128f222f844e699760e32695d405bd5931635ec38ae50eddc17a0976ccefb4","cc4cc20b558096855c5d492f7a79b160a809355798be2b824525c98964450492","dd2675e2f6835f8a8a0e65e9dbc763ca9229b55af7d212da38b949051ae296a5","e89f48a7351c01cbf2f8e31c65a67f76a5ead689bb11e9d4918090a165d4425f","fb02e97d52a00fca1580ca71ed152dd28dd5ae28ab0a9c8e7b32cebd7f1998a1","ff2ae62ba88e7068fa142bbe67d7b9398e8ae737a43cf36ace1fcf809776c909","ffbe988fd797cbb9a1eedb705cf00ebc8277cdbd9a21b6efb40a8bc22c7a43f0")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://freeupload.store/rale7/wihituce08.msi/download","https://ws.onehub.com/files/4mbha9wd","https://ws.onehub.com/files/kwdphknm","https://kinneretacil.egnyte.com/fl/werx5mfnfx","https://kinneretacil.egnyte.com/fl/grykrfurte","https://filetransfer.io/data-package/tume19fv/download")
