index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9549d3d2b8e8b4e8f163a8b9fa3b02b8a28d78e4b583baccb6210ef267559c6e","436994d4a5c8d54acb2b521d0847d77e6af6c2c0e40468248b1dd019c6dafa84","ace33243994a9da0797601bdd4191e25967a1da2644f0d0b530e26c71854d5d9","a05d053174b52a9b158a5ec841c1a7633b9368c4ac2da371a11a9364f8a8dc60","1dbcade04333b9dc81ba0746bc604d12489da49b9b65fcb5b1f61d139dc5949c","38da8d1576bdd0a03e649e8e6543594b35a423aa5b0a0c4081fc477c8e487e09","b29ed89e0428ba476459adabb5630c8d29f7fee5905c5de10d792fe3a02e52a6","6e0d12cd0252599fd1dec7aa460cae7a12a1b2e322b6664e64c773c23627d1b4","ed6775184051ef36c3049e24167471ab42bd4301e99631c8423d4d753cdad455","fda71a7de6d473826465bb83210107501e66a5d96e533772444b3b24806286fd","8820e0c249305ffa3d38e72a7f27c0e2195bc739d08f5d270884be6237eea500")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://206.188.197.113/","https://195.123.225.88/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://206.188.197.113/","https://195.123.225.88/")
