index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("b9ef2e948a9b49a6930fc190b22cbdb3571579d37a4de56564e41a2ef736767b","c429719a45ca14f52513fe55320ebc49433c729a0d2223479d9d43597eab39fa","19896a23d7b054625c2f6b1ee1551a0da68ad25cddbb24510a3b74578418e618","a51b1f1f0636bff199c0f87e2bb300d42e06698b","d93f1ef533e6b8c95330ba0962e3670eaf94a026","9e19afc15c5781e8a89a75607578760aabad8e65","9a92b147cad814bfbd4632b6034b8abf8d84b1a5","a4ef01d55e55cebdd37ba71c28b0c448a9c833c0","85087f28a84205e344d7e8e06979e6622fab0cfe1759fd24e38cd0390bca5fa6","5b08c02c141eab94a40b56240a26cab7ff07e9a6e760dfde8b8b053a3526f0e6","bc609cf53dde126b766d35b5bcf0a530c24d91fe23633dad6c2c59fd1843f781","13c25164791d3436cf2efbc410caec6b6dd6978d7e83c4766917630e24e1af10","2b93206d7a36cccdf7d7596b90ead301b2ff7e9a96359f39b6ba31bb13d11f45","84e1efbed6bb7720caea6720a8bff7cd93b5d42fb1d71ef8031bfd3897ed4435","e0dbe3a2d07ee10731b68a142c65db077cfb88e5ec5c8415e548d3ede40e7ffc","34a98f2b54ebab999f218b0990665485eb2bb74babdf7e714cc10a306616b00c","342b398647073159dfa8a7d36510171f731b760089a546e96fbb8a292791efee","3e6e2e0de75896033d91dfd07550c478590ca4cd4598004d9e19246e8a09cb97","5654f32a4f0f2e900a35761e8caf7ef0c50ee7800e0a3b19354b571bc6876f61","91605641a4c7e859b7071a9841d1cd154b9027e6a58c20ec4cadafeaf47c9055","fb638dba20e5fec72f5501d7e0627b302834ec5eaf331dd999763ee925cbc0f9","f0197bd7ccd568c523df9c7d9afcbac222f14d344312322c04c92e7968859726","b987f738a1e185f71e358b02cafa5fe56a4e3457df3b587d6b40e9c9de1da410")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="149.28.73.161" AND sourceport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND destinationtranslatedport=443)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="149.28.73.161" AND translatedport=443)
