index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dilimoretast.com" OR destinationhostname CONTAINS "antnosience.com" OR destinationhostname CONTAINS "oceriesfornot.top" OR destinationhostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dilimoretast.com" OR sourcentdomain CONTAINS "antnosience.com" OR sourcentdomain CONTAINS "oceriesfornot.top" OR sourcentdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dilimoretast.com" OR sourcehostname CONTAINS "antnosience.com" OR sourcehostname CONTAINS "oceriesfornot.top" OR sourcehostname CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dilimoretast.com" OR destinationntdomain CONTAINS "antnosience.com" OR destinationntdomain CONTAINS "oceriesfornot.top" OR destinationntdomain CONTAINS "arelyevennot.top")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b63e94928da25e18caa1506305b9ca3dedc267e747dfa4710860e757d2cc8192","1d64879bf7b1c7aea1d3c2c0171b31a329d026dc4e2f1c876d7ec7cae17bbc58","511c1021fad76670d6d407139e5fef62b34ca9656fb735bd7d406728568fa280","faf49653a0f057ed09a75c4dfc01e4d8e6fef203d0102a5947a73db80be0db1d","0f3bb820adf6d3bba54988ef40d8188ae48b34b757277e86728bdb8441d01ea2","0789a9c0a0d4f3422cb4e9b8e64f1ba92f7b88e2edfd14b7b9a7f5eee5135a4f","8d30ab8260760e12a8990866eced1567ced257e0cb2fc9f7d2ea927806435208","2c84b5162ef66c154c66fed1d14f348e5e0054dff486a63f0473165fdbee9b2e","116e8c1d09627c0330987c36201100da2b93bf27560478be4043c1a834ad8913","99a732c0512bc415668cc3a699128618f02bf154ff8641821c3207b999952533","f72c47948a2cb2cd445135bc65c6bf5c0aaacc262ee9c04d1483781355cda976","f8136eb39ee8638f9eb1acf49b1e10ce73e96583a885e4376d897ab255b39bd6","79e25568a8aeec71d18adc07cdb87602bc2c6048e04daff1eb67e45f94887efc","d44c065f04fe13bd51ba5469baa9077efb541d849ad298043739e08b7a90008f","239d1c7cfd5b244b10c56abbf966f226e6a0cb91800e9c683ba427641e642f10","7522b6de340a68881d11aa05e2c6770152e2d49ca5b830821ffce533fad948fd","5bc00ad792d4ddac7d8568f98a717caff9d5ef389ed355a15b892cc10ab2887b")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("138.68.42.130","157.245.142.66","188.166.154.118")
