index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("d6faa6bd1732517f260d94feb3cdbfc2","1152103edc64ddee7ea4e07cd5dd78ae","ef082ddcbf5c94f1da1d2026d36b6b3f","55cf60a640fc773a7c38de9c5e44da30","cf16271bfe826db5ef0c1a67433a619f","7f5c82eadbaadec6ba2b004fbafa9a31","328110e6c36cd70edac6bea395c40b18","363b4f9fdb1e2a5926037b207caecfe5","b183269587055f35cb23d2d33ff3f5fa","2df579460a76631836d108578af4caa5","0e36cf2719295596da0c7ef10b11df15","1eda7707ef4e03f0b1ab6b6fb96757a6","d524addd18d8014d72abb9dd172e782d","ef9d05bb8a24bec1d94123c90b1268bb","4341f0372eda93afce82908014f420d9","30997b5e63297c58c4f9fe73c8c200ac","eed2174f5b87d58b1b0baea0e509e141","deaf955bbf5d66db200e366ae3563eab","cac3c4005f952293b38302199494759a","fca4c1908da892161bbf09f1437dade7","beb8a50f67424c3b70cb56fc8833d246","04cdff477585cb0747ecd20052f03c2e","404bd47f17d482e139e64d0106b8888d","7a7d09b4bcd75bc7d7badd3c117596f7","a1846e262d900f56f4a7d5f51100ec44","dfa96717b69fa69d264a60b9de36f078","253cdeabd5e429832f9bbd7f37dd0798","c56b5f0201a3b3de53e561fe76912bfd","763d557c3e4c57f7d6132a444a930386","d0ad617ed1812822eebc9592d49a575c","1ff108f1bfb39b21db5f1d4f7ad56bf2","96bb795d111717109fac22f8433c7e27","0852c3e7903dd3b1db6a6b232c33a25a","e0768bce522927eb89f74750e09f2a1c","7133ae7dd452aa6469c85e236a59159e")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://kostumn1.ilabserver.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://kostumn1.ilabserver.com")
