index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("d8469e32afc3499a04f9bcb0ca34fde63140c3b872c41e898f4e31f2a7c1f61f","f15e92c34dd8adfcd471d726e88292d6698217f05f1d2bcce8193eb2536f817c","3b948a0eb0e9bbca72fc363b63ffd3a5983e23c47f14f8296e8559fd98c25094","bb96db7406566ec0e9305acde9205763d4e9d7a65f257f3d5c47c15f393628ec","e48179c4629b5ab9e53ccb785ab3ee5eeb2e246e1897154a15fec8fd9237f44b","9678ca06068b705da310aa2f76713d2d59905b12b67097364160857cd1f90c58","654f080d5790054f0cd1a0f9b31cd7a82a4722ff3ce5093acdc31ff154f1ae24","cb132691793e93ad8065f857b4b1baba92e937cfc3d3a8042ce9109e12d32b4c","d37d0ae4c5ced373fe1960af5ea494a6131717d1c400da877d9daa13f55439bb","c79aed9551260daf74a2af2ec5b239332f3b89764ede670106389c3078e74d1a")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://cdn.discordapp.com/attachments/523238636561629190/890007970207907871/vltn.exe","bigdaddy-service.biz:6606","bigdaddy-service.biz:7707","bigdaddy-service.biz:8808","daddy.linkpc.net:1199")
