index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("a70729b3241154d81f2fff506e5434be0a0c381354a84317958327970a125507","2ef9a4f7d054b570ea6d6ae704602b57e27dee15f47c53decb16f1ed0d949187","c170717a69847bb7b050832c55fcd2a214e9180c8cde5f86088bd4e5266e2fd9","a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7","32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://185.150.117.186:80/asdfgsdhsdfgsdfg")
