index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("3b779a84c17a3a2b588241676ec372c543b592473dae9d6b14db0d0d33522f34","7ab3f076e70350f06ad19863fdd9e794648020f621c0b1bd20ad4d80f0745142","537dee22d8bc4867f45deddfa26c6d08a12c09e4fb5b539422e9b4d8fb0dff4a","586f30907c3849c363145bfdcdabe3e2e4688cbd5688ff968e984b201b474730","453014da94a1382f9f11535b3d90a44d67f43c02ffe8688465956a3ed7e71743","d824eb45247f9b8e0266dc739425d80af4145062687d7e825e03adfac1b7e03b","414ed95d14964477bebf86dced0306714c497cde14dede67b0c1425ce451d3d7","30cd61f13d64562a41eb5e8a3d30cd46d8678acd9eef4c73386c3ea4adb50101","8637a4286d87a4fa3b6a102446f437058812be0d4ebb361ac8827ea4f186df23","551653deddb8d9a78c1a239cc2da99ea403ce203c5843384c986149d4c17f26c","b3458b3d0bb80029de30f41ffc8e318176cca650d76b75549089b8a436e8862a","9ca9f414b689fc903afb314016155814885966b0e30b21b642819d53ba94533c","07b1b9d46a926084019c9e1a22ef724d7dd20fd85d144012dd4855ca66ad96fe","68d8f895135aab32f0b0f2520f1dd3ea791a0e0fec3e4e21d94040015bbbf096","5a73fdd0c4d0deea80fa13121503b477597761d82cf2cfb0e9d8df469357e3f8","28d0e945f0648bed7b7b2a2139f2b9bf1901feec39ff4f6c0315fa58e054f44e","1a0e33a0e434e22e25a17b5d40fbef4fe900f075fcfa0dadd473010d03185e4a","b4a85ef01b5d8058cf94f3e96c48d86ce89b20295e8d1125dc3fc1c799a75789","0e20819e5584a31f00d242782c2071734d7e2377306e9ebd20dd435ce9c7d43a","147187d4ca823187724205a7dbd6502a9409674e6602363d796218503c960e2f","5e62d4851596e3fb939525fa4437c553ab5c6b9d12920af7740a3473102ccd1a","7399605f47be3d8ed021c9189b6b102461d5dd98a9d9082c71ff368e13cf8541","cb6769bd80d5a234387bdaa907857ae478e2e693a157f29d97b8ce2db07856c1","dda85ee1e0b4916ebd2eb7cbaeaa969843a19e7b8a9bb5d360a4bbc0bad91877","bfa7adeda4597b70bf74a9f2032df2f87e07f2dbb46e85cb7c091b83161d6b0a","b7de7187f0f0281c17ae349b692f70892689ddf27b6b418142c809b41dfe3ce7","de00c0111a561e88d62fd84f425a6febc72e01e2e927fb76d01603319a34b4b3","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "tecnojournals.com" OR destinationhostname CONTAINS "semiconductboard.com" OR destinationhostname CONTAINS "cyancow.com" OR destinationhostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "tecnojournals.com" OR sourcentdomain CONTAINS "semiconductboard.com" OR sourcentdomain CONTAINS "cyancow.com" OR sourcentdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "tecnojournals.com" OR sourcehostname CONTAINS "semiconductboard.com" OR sourcehostname CONTAINS "cyancow.com" OR sourcehostname CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "tecnojournals.com" OR destinationntdomain CONTAINS "semiconductboard.com" OR destinationntdomain CONTAINS "cyancow.com" OR destinationntdomain CONTAINS "bluedragon.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://tecnojournals.com/review","https://tecnojournals.com/general","https://semiconductboard.com/xml","https://semiconductboard.com/xcror","http://cyancow.com/find","https://bluedragon.com/login")
