index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("2cffb660f00ee2192270871b22ed0cfa","da6ec25b71a864691f14d0f05206a41d8048da20813078553a841154d37884df","4fdf3bcef29d971538db6123aa2b790a","954e24d36e9e6949723a6c1b8f1274c9eb3efd50eb6328da9b9389d170382dfb","2ea4c2a45e726b9549f2143ecd79a6b0","42a3649b09af5240e45cecceaf7f2687eccfa986644634e8cf101621eb85c8ff","c4f351ca77c677737b3cd4e315c73583","1a5c663ce00d4cf51ca41563f84184db0da405aa0a2004d12c8931af9f56e8de","a1a0d974b78dc4ee6a370473dd98ebf3","3a1bdab276e6a89b79d90d09d348f21fb0a2df484922e68de667183add7a68f4","1a090868b09e7e3693444d471c369f53","4c8860ac0e41d9a8d311a632366ea15d245c2abe139f1ced0dbbfe87e974e852","86a25d9b475bae330de40c78009d8079","f307bb1e8bdf77afc88118d99d9cfbecd390e870c66645b3730ade8477bc23d4","2b4122ee9268a8145484204364d9f8d8","0264c5832e9224ea2efc028ae6f06af86ab0035356ae17d3ed9e2e9bf1d8eef9","426986b949fab90f087762849f8d1f6f","85752ce0ce2b21bebf1f8ce070d1c124d9941f84b021c3f68bd029f37a339d03","cd9c91dc759bde5041aa2838e9cdb3fd","9569969db54356f6902ae907c4b4498fe4f11298468b758cb7d4479fa6f72a5b","062e5d6aedf7c4fe4b6058be643b8153","72bcbaac804b9043831a570e2d39e63576138b3f849055a5f0162c0afad3e9cb")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "sackmeister.de" OR destinationhostname CONTAINS "ssttekstil.com" OR destinationhostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "sackmeister.de" OR sourcentdomain CONTAINS "ssttekstil.com" OR sourcentdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "sackmeister.de" OR sourcehostname CONTAINS "ssttekstil.com" OR sourcehostname CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "sackmeister.de" OR destinationntdomain CONTAINS "ssttekstil.com" OR destinationntdomain CONTAINS "academiadutygroup.com.br")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://academiadutygroup.com.br/sticky.txt","https://sackmeister.de/node.txt")
