index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("dbf5f56998705c37076b6cae5d0bfb4d","e6ab3c595ac703afd94618d1ca1b8ebce623b21f","5dc8b08c7e1b11abf2b6b311cd7e411db16a7c3827879c6f93bd0dac7a71d321","3a4fdbc642a24a240692f9ca70757e9f","794203a4e18f904f0d244c7b3c2f5126b58f6a21","5f7d438945306bf8a7f35cab0e2acc80cdc9295a57798d8165ef6d8b86fbb38d","7a4cb8261036f35fd273da420bf0fd5e","9648559769179677c5b58d5619ca8872f5086312","4ef1009923fc12c2a3127c929e0aa4515c9f4d068737389afb3464c28ccf5925","1be7fe8e20f8e9fdc6fd6100dcad38f3","c4cde794cf4a68d63617458a60bc8b90d99823ca","4ee4e1e2cedf59a802c01fae9ccfcfde3e84764c72e7d95b97992addd6edf527","4232c065029eb52d1b4596a08568e800","79818110abd52ba14800cdff39eca3252412b232","3298629de0489c12e451152e787d294753515855dbf1ce80bfcded584a84ac62","637fb65a1755c4b6dc1e0428e69b634e","fba4652b6dbe0948d4dadcebf51737a738ca9e67","b3b1ff7e3d1d4f438e40208464cebfb641b434f5bf5cf18b7cec2d189f52c1b6","0b1882f719504799b3211bf73dfdc253","448892d5607124fdd520f62ff0bc972df801c046","39ec2834494f384028ad17296f70ed6608808084ef403714cfbc1bfbbed263d4","e20fc97e364e859a2fb58d66bc2a1d05","f5f56413f81e8f4a941f53e42a90ba1720823f15","9514035fea8000a664799e369ae6d3af6abfe8e5cda23cdafbede83051692e63","c737a137b66138371133404c38716741","a3e4fb487400d99e3a9f3523aeaa9af5cf6e128b","25172a046821bd04e74c15dc180572288c67fdff474bdb5eb11b76dce1b3dad3","7a1e7f652055c812644ad240c41d904a","b39c244c3117f516ce5844b2a843eff1e839207c","5fac60f1e97b6eaae18ebd8b49b912c86233cf77637590f36aa319651582d3c4","e0d1cf0abd09d7632f79a8259283288d","3a78ce27a7aa16a8230668c644c7df308de6cf33","d15cab3901e9a10af772a0a1bdbf35b357ee121413d4cf542d96819dc4471158")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="194.49.94.18" AND destinationport=8443 OR destinationaddress="194.169.175.134" AND destinationport=8443 OR destinationaddress="91.92.250.60" AND destinationport=443 OR destinationaddress="91.92.250.65" AND destinationport=443 OR destinationaddress="91.92.245.26" AND destinationport=443 OR destinationaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="194.49.94.18" AND sourceport=8443 OR sourceaddress="194.169.175.134" AND sourceport=8443 OR sourceaddress="91.92.250.60" AND sourceport=443 OR sourceaddress="91.92.250.65" AND sourceport=443 OR sourceaddress="91.92.245.26" AND sourceport=443 OR sourceaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="194.49.94.18" AND sourceport=8443 OR translatedipaddress="194.169.175.134" AND sourceport=8443 OR translatedipaddress="91.92.250.60" AND sourceport=443 OR translatedipaddress="91.92.250.65" AND sourceport=443 OR translatedipaddress="91.92.245.26" AND sourceport=443 OR translatedipaddress="195.123.226.84" AND sourceport=8000)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationport=8000)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND destinationtranslatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND destinationtranslatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND destinationtranslatedport=8000)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="194.49.94.18" AND translatedport=8443 OR destinationtranslatedaddress="194.169.175.134" AND translatedport=8443 OR destinationtranslatedaddress="91.92.250.60" AND translatedport=443 OR destinationtranslatedaddress="91.92.250.65" AND translatedport=443 OR destinationtranslatedaddress="91.92.245.26" AND translatedport=443 OR destinationtranslatedaddress="195.123.226.84" AND translatedport=8000)
