index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "mail.saadzakhary.com")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("05dc0792a89e18f5485d9127d2063b343cfd2a5d497c9b5df91dc687f9a1341d","ff0979fbfc57104e431e0fb1c1107859789f913a","a3a7e49226d703a4aee1d227c6f441e6","250d2cd13474133227c3199467a30f4e1e17de7c7c4190c4784e46ecf77e51fe","5c3649b1c1863eb4836d4bcea239efa9e8f27ec5","d0ba0e870e45aca2b4488ec5efe8d225","165305d6744591b745661e93dc9feaea73ee0a8ce4dbe93fde8f76d0fc2f8c3f","1f23929f342f1c94711ff515b97b045223f5859f","6afd738114d5dd675a0d45120672fa6e","297f318975256c22e5069d714dd42753b78b0a23e24266b9b67feb7352942962","84c6107846ca5b1878efce41363d61c9b16c8907","cc2491b0a60c878ffdf08692371eda5d","f1794bfabeae40abc925a14f4e9158b92616269ed9bcf9aff95d1c19fa79352e","20a3e59a047b8a05c7fd31b62ee57ed3510787a979a23ce1fde4996514fae803","849e0962e63af026570d867836daa87a7d3e6049","4e1949cfd1dfc5de07d32f2fdc96699c")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://vtaurl.com/IHytw","http://192.227.196.211/tea_shipping/f_document_shp.doc","http://192.227.196.211/FRESH/fresh.exe")
