index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("5b703687f8f4ad80dd8a6328bb797fec339da9f2","3ee3d0fe0a4bfb5b0409803a5151fead88711ff56c349c22b7086a468fcc4400","5e03e8aeb209f18f5f6ba12ef28011ad8c40d180","dd261a5db199b32414c33136aed44c3ebe2ae55f18991ae3dc341fc43a1ef7f4","3551655021b1ac0175d55e73c9c8af2f","884a2351f5c41a26a351a6d8ca5ddb84ce6130a8","d55bc39f385fca3294e45a844f661444d8908988","7ea17ffb336a7d8b24d62ba78151d264","a319c07c124da09259a2ff9848b0bb38","5d25509ca9a8d5874e4e7e4f04886cc5ac64be45","10f30319eb0f7f939e2e872fdcef2f17d448c924","128cfff31aa393605ececf2689a40fd6","37f2f766cef155479ca67267a9734d88","42ae60c07deb4773e712b3fd71dddf51a545d6090fec39f46694ba6974e04bac","87d3b77cbcb9c4a7f6cfbb4f8ada11aa7edf7b5343803401060671cce174a717","99a10c546b13d3efd945c574ed4e10a4","b467fb098af61e4187a24447ba62c1565e354d989c8a9860106a574a81114738","a712950af45bdc5e33863aae223c1ac6","5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b","5002563c40154177d4afa4154a73a712532f242a","eeb7e301fc7e33ea2e67b44fc363aae9db7a7f9f","26a2bed37cefc7877a3f2e1258bbcae5cc04914c4918992f067cc8df386e569e","ef96afb2794f800918fddd76f6756e1c","986abd7f0b35386c2babb9fb1c81c3167a1f76bea1dd4c0d8cab5cc0e27798e8")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://mail.chapanakit-rta.com/queen/m.hta","https://mail.chapanakit-rta.com/pt/wct9d39.jpg")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.245.253.46" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.245.253.46" AND translatedport=443)
