index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b9db845097bbf1d2e3b2c0a4a7ca93b0dc80a8c9e8dbbc3d09ef77590c13d331","0233dcf6417ab33b48e7b54878893800d268b9b6e5ca6ad852693174226e3bed","f7f105c0c669771daa6b469de9f99596647759d9dd16d0620be90005992128eb","8462d0d14c4186978715ad5fa90cbb679c8ff7995bcefa6f9e11b16e5ad63732","d318e9f2086c3cf2a258e275f9c63929b4560744a504ced68622b2e0b3f56374","fc97a8992fa2fe3fd98afddcd03f2fc8f1502dd679a32d1348a9ed5b208c4765","e4a58509fea52a4917007b1cd1a87050b0109b50210c5d00e08ece1871af084d","cbdd24ff70a363c1ec89708367e141ea2c141479cc4e3881dcd989eec859135d","d5bd2b6b86ce14fbad5442a0211d4cb1d56b6c75f0b3d78ad8b8dd82483ff4f8","29aafbfd93c96b37866a89841752f29b55badba386840355b682b1853efafcb8","4ed78c4e90ca692f05189b80ce150f6337d237aaa846e0adf7d8097fcebacfe7","130888cb6930500cf65fc43522e2836d21529cab9291c8073873ad7a90c1fbc5","3ce8dfaedb3e87b2f0ad59e1c47b9b6791b99796d38edc3a72286f4b4e5dc098","6b514e9a30cbb4d6691dd0ebdeec73762a488884eb0f67f8594e07d356e3d275","7c70716a66db674e56f6e791fb73f6ce62ca1ddd8b8a51c74fc7a4ae6ad1b3ad","2b305939d1069c7490b3539e2855ed7538c1a83eb2baca53e50e7ce1b3a165ab","4dcae1bddfc3e2cb98eae84e86fb58ec14ea6ef00778ac5974c4ec526d3da31f","e8e90f02705ecec9e73e3016b8b8fe915873ed0add87923bf4840831f807a4b4","64a31abd82af27487985a0c0f47946295b125e6d128819d1cbd0f6b62a95d6c4","623e7ad399c10f0025fba333a170887d0107bead29b60b07f5e93d26c9124955","59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af","9ca4fbfa2018fe334ca8f6519f1305c7fbe795af9eb62e9f58f09e858aab7338","05727581a43c61c5b71d959d0390d31985d7e3530c998194670a8d60e953e464")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "dash.cloudflare.ovh" OR destinationhostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "dash.cloudflare.ovh" OR sourcentdomain CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "dash.cloudflare.ovh" OR sourcehostname CONTAINS "main.cloudfronts.net")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "dash.cloudflare.ovh" OR destinationntdomain CONTAINS "main.cloudfronts.net")
