index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("c3e04bb4f4d51bb1ae8e67ce72aff1c3abeca84523ea7137379f06eb347e1669","0d1dd7a62f3ea0d0fbeea905a48ae8794f49319ee0c34f15a3a871899404bf05","b2419afcfc24955b4439100706858d7e7fc9fdf8af0bb03b70e13d8eed52935c","23d917781e288a6fa9a1296404682e6cf47f11f2a09b7e4f340501bf92d68514","dd5a16d0132eb38f64293b8419bab3a3a80f48dc050129a8752989539a5c97bf","74fab6adc77307ef9767e710d97c885352763e68518b2109d860bb45e9d0a8eb","b6914d702969bc92e8716ece92287c0f52fc129c6fb4796676a738b103a6e039","29101c580b33b77b51a6afe389955b151a4d0913716b253672cc0c0a41e5ccc8","cdc3355ae57cc371c6c0918c0b5451b9298fc7d7c7035fa4b24d0cd08af4122c","dc2df351c306a314569b1eeaccf5046ce5a64df487fa51c907cb065e968bba80","76e4d344b3ec52d3f1a81de235022ad2b983eb868b001b93e56deee54ae593c5","6a00b1ed5afcd63758b9be4bd1c870dbfe880a1a3d4e852bb05c92418d33e6da","2abb9e7c155beaa3dcfa38682633dcbea42f07740385cac463e4ca5c6598b438")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="O365 General" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="O365 General" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="O365 General" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://ruzede.com/blogs/drafts/publish/schedule/seosso/login/mfa/verify/token/refresh/ips/blocklist/whitelist","https://fast-eda.my/dostavka/lavka/kategorii/zakuski/sushi/sety/skidki/regiony/msk/birylievo")
