index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("eef01a6152c5a7ecd4e952e8086abdb3","fd3c1844af6af1552ff08e88c1553cc6565fe455","e43b83bf5f7ed17b0f24e3fb7e95f3e7eb644dbda1977e5d2f33e1d8f71f5da0","66502250f78c6f61e7725a3daa0f4220","8cfc5d40a8008e91464fd89a1d6cb3a7b3b7a282","05854ea1958ef0969a2c717ce6cb0c67cd3bcd327badac6aa7925d95a0b11232","a1249d31ea72e00055286c94592bc0e3","8644ac0cc1a805f1682a0b0f65052a1835e599b1","01c83c32ab5c2f0fda5c04aee7b02dc30d59c91c1db70e168a6cc1215cc53ab7","e062fedb25bbf55894711100c35130c1","b28568c19eaafd0e8212b81ea7b87340554e1340","c5e9d0aa26ca6255559708bcf957d79e3adb4d2b08146cd765182f7b834227f4","f71d077c9889d005c8c71f3a2fe20fd0","2ba8275af7b7708a7f79bb442c980ec3d3c04b91","dcd2c2073c227e5b496ca0cb13e31d18b45899dca0de1633f2eeb25d264258de","a6064cd1760ea08973b20bdc0e7ea699","c5f3342e9fcc159eef81a459d54eb7b6ce80feb1","bc709e3aea5732c3d07c7f59ea22f8a5c026e45558d0e2aa3fb35ac78f39d9f4","c9ac6deb0ef78785d469033117411e3d","15622e8ec3ec4c29f09b3871678199599d285e43","0eb43cef2e674aa72b24cccd36b349ce0e4eb347c0fbf373bc53c97713e8e94f","da9f8ec6d3337315435fa9d9d7868980","ebf6edd68e97bd13d4ed3e878c7bd11dfb5a628c","117d5155fe3659a816f10faf859ff68c6094457eb1902d6699df74fac309befd","d72619b4ededa0f8cfe9554557bf2c7f","ee456a4b32eff2eddf14c6ae5385d977081308b4","4da90f77a26a16eee48cb73ca920e681974554be0d87a225e7ad9416adbf34c6","215c203f7f3e3f63c5ae9e35d8625463","b6bfbbd9c49cc94e4fcab413f62a12bb23485cdf","bc51e019e91bbb8e704ee4b7027dab4f7168b3b4e947e83d43bf4c488aa2b612","ece1ffba058735ab9521ee1ed5cf969c","35a06ba7f2cffaf5c2f97c7fe02d235c6317ebf2","6dbeb13c7efbd62561bf2fea3b1e3d36021e701b80a993e28498182d0884ce6f","f0807f8ec6349d726b19713ece98c57b","e341cd9abfca8e02bef0d0af94343949a23ce6c4","bf46b901e1899533629b751f28bd4adab3f11f0ddf8b509c9f90af25a1a73b5b","88facb451a849d37a272ab9a7a83a47c","27c66fa23f8af20be0234f95b35e64ccea7d73ae","5b11938d67a8a0c629bf4ec1f8b77c6ba0910546984d4d983f43a25d4e7b72ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("185.246.116.237")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Microsoft Windows" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Network Access Control / NAC" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Virtualization / Containers" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Access / Privileged User" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Access / Identity Management" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Identity Access Management" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Authentication / WiFi" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://185.246.116.237:5001/getfile")
