index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "npulvivgov.cfd" OR destinationhostname CONTAINS "ms-team-ping.com" OR destinationhostname CONTAINS "azure-expresscontainer.com" OR destinationhostname CONTAINS "acqua-tecnica.it" OR destinationhostname CONTAINS "phuyufact.com" OR destinationhostname CONTAINS "amaprox.click" OR destinationhostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "npulvivgov.cfd" OR sourcentdomain CONTAINS "ms-team-ping.com" OR sourcentdomain CONTAINS "azure-expresscontainer.com" OR sourcentdomain CONTAINS "acqua-tecnica.it" OR sourcentdomain CONTAINS "phuyufact.com" OR sourcentdomain CONTAINS "amaprox.click" OR sourcentdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "npulvivgov.cfd" OR sourcehostname CONTAINS "ms-team-ping.com" OR sourcehostname CONTAINS "azure-expresscontainer.com" OR sourcehostname CONTAINS "acqua-tecnica.it" OR sourcehostname CONTAINS "phuyufact.com" OR sourcehostname CONTAINS "amaprox.click" OR sourcehostname CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "npulvivgov.cfd" OR destinationntdomain CONTAINS "ms-team-ping.com" OR destinationntdomain CONTAINS "azure-expresscontainer.com" OR destinationntdomain CONTAINS "acqua-tecnica.it" OR destinationntdomain CONTAINS "phuyufact.com" OR destinationntdomain CONTAINS "amaprox.click" OR destinationntdomain CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "npulvivgov.cfd" OR requesturl CONTAINS "ms-team-ping.com" OR requesturl CONTAINS "azure-expresscontainer.com" OR requesturl CONTAINS "acqua-tecnica.it" OR requesturl CONTAINS "phuyufact.com" OR requesturl CONTAINS "amaprox.click" OR requesturl CONTAINS "ama0899.shop")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("bcce8115784909942d0eb7a84065ae2cd5803dc9c45372a461133f9844340436","9cbb497f0878a073504d3699cfbd86a816c7941234729631722d010f6ecd09f5","7deb9e6398c92cf01502f32a78c16f55354dcf3d2b062918f6651852742bc7cd","c25e4bd9e8d49f3beef37377414028b07986dacce5551f96038b930faf887acc","9d2a88f7f4d6925e654ee3edcd334eb9496a279ee0c40f7b14405b35500ebf99","bf9e6bee654831b91e891473123bbd9bc7ff3450471e653c7045f5bd8477d7a1","b8fb772d92a74dcd910ac125ead1c50ce5834b76f58e7f107bb1e16b8c16adbb","61fee7e2012919fafc3b47b37753ff934f7a0ca2a567dca5f15d45ab55ae2211","c62fe8d6c39142c7d8575bd50e6f2fcd9f92c4f0a1a01411d0f3756a09fd78a7","2bd4df59071409af58d0253202b058a6b1f1206663236dea5163e7c30a055f21","27c9c4e200815a9f474126afa05d4266bc55aafa9df0681a333267e4bbd101de","7f505f8a947715ae954e5eb93e9e1911843dc2c16462a146e5658e4101cedc0e","d71148d7e64f2a3464488d696ac2312987eb4e8008c9a62956388d39905c865f")
