index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "you-rabbit.com" OR destinationhostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "you-rabbit.com" OR sourcentdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "you-rabbit.com" OR sourcehostname CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "you-rabbit.com" OR destinationntdomain CONTAINS "don-dns.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "you-rabbit.com" OR requesturl CONTAINS "don-dns.com")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("fb67f006c56ab5f511be9a7b14787396fc17f587188e7da05dfdec4ebf28f924","c700c6d555983cb2af297ca854143de7f92e3ec88a975dcb4570376b75c38e34","8a9e38bcc89a0e843b1b3ee6465033715ed71ff25ba3b33fb8f97be417ffc091","00a258de9d8e2b21e444b8aa0666d498e120bca9195c64a60e3076708e111fab","22c835f2af4b2020f314cb98fcd591fdccd3b0da155e934548f6109ebabff707","6f91c7b8e6d50bc6d0b7591cdcd3b8594107cb0bbdd44c5031fd938365087f68","08a33b5312b9e7a3fe0ab5f82705646df372fd0c4ed5c61a32344682ed40c08a","06c4dec4787206be38e5d6226b8a82f81270eea893cd6c8deca82e6118fdeed8","e4f5ee78cf7f8147ab5d5286f4af31dc94cfced6913f3f5f5dad8d87a8cbca7c","e956066bf3c9f18728111c112c457431bd4f2649f8d7d2049b772f55e9561dc0","531b5db554ddb65534936ba3329a68a8b127b4ef46d344317d922d4c342a29f3","f14592245eb90d57dd5a4c8dc38009e8c662d753d7fb95edc00b65b91f30e779","accff930cc6aa6afa25b164bc35bc612ea5067b273f1c2ec66c44327e1cdbd2f","ea47a4be67a767c65838cd5382e2b59178ef6a0f5a8610645e324488f53aa2c6","65827a0e24ce36007307db3f415a97e6e9dc8bd9504b025a39ee9805f021d599","18b21e97e7b9fc3bc2a2f213f846bfd9e8e5d1df674fc5643ef32be5dc4ae5ff","380637e36765a4a2969687cf002c3a17abde1d1f460bbf85c536a36b8dd2758c","17e8fc8674d75114cc7feb84dc52e42a9e2a7377e0df6f11add850d5aece135a","bcaa8b7cbb933b2b2deedac426fd8c107f513918e1243902c3936c4009d945b6","5af7c0ad5425c6c3a631dd800dcb7e6035cebf03210433914544d330063ebe49","5cc418457bc22049b535cd99f4f3d79e8f348c84b6b88e9600546bbcfaea5878","d84cb4a6fb4d068ab1677a0a3dc1a606a46a1583e6676f2641703efec0d63baf","6c7032c4f5a90307b00dd0142fbcc6ef6c423ecdfa3ce942e2bae4386dbbdbdb","c0e554c1c620cc7200a1803b54a11ac15895a8d07be65a7772089b2b8e441537","fe84ad7571e4a518481df52242e02415de0b6cefff8f8b4f91eeee407051f7cb","0e3369b689948b9f009fe2f8eedf0ca977c53ebdcf19ab5da656c329e3a2e394","d094428bfa619d2e0c5139491b84e4ec0fecb325f346e28f9e0bda7860dfc9ab","561f021f3b4f69705ed9e93cba53f8197cb2fd8c56c1e7fae9a622b5be4740ee")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://you-rabbit.com/api/machine/commands?uuid","https://you-rabbit.com/api/machine/set-command","https://you-rabbit.com/api/exchange/settings","https://you-rabbit.com/api/exchange/create-account","https://you-rabbit.com/api/exchange/set-all-balances\nhttps://you-rabbit.com/api/exchange/set-balance","https://you-rabbit.com/api/exchange/get-address?","https://you-rabbit.com/api/exchange/set-withdraw","https://you-rabbit.com/api/machine/set-grabber-info","https://you-rabbit.com/api/machine/init","https://you-rabbit.com/api/machine/injections?uuid","https://you-rabbit.com/api/machine/settings","https://don-dns.com/hittest.php?a")
