index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("2456c01f5348e5c08f7e818d51862c1","625be3e4dbfb0bd35c9cda216a9bca7232dbec07","34da973f1d154672b245f7a13e6268b4ffc88dea1ca608206b32759ec5be040c","b739be28cb9a30868112d4786bc11d37","296e19773f6fb7190d914ac556abe0125e5d7aa5","b3ccec8ca26bc3b6597ddb0424a455eb7809e7608f5d62f6c7f5d757d4d32253","86344d7e6e5b371717313032632cbbe1","3921694be80b2fd5d8007c8155bee018c32fecbb","b64606198c158f79287b215343d286adf959e89acb054f8f3db706f3c06f48aa","688e0b37794395cfecaf9cc519e3c26a","d215d4166dfa07be393459c99067319036eb80ba","77fdce66e7f909300e4493cbe7055254f7992ba65f9b7445a6755d0dbd9f80a5","6080b540d975b7a4f66cd54ee83ed600","62324b38a5a5a2533f3bd401d7afd1c6c4235b08","89c9c14af6ab4f3f93705325dbc32bde6c232d26d22e8f835db24efc18007ea4","2ffae162e07ba8debdf25694e8fd8325","a1289c3e585e091a7c8f89869a76e40f7e3880fd","d691f44b587c6ed47c2d57b2bf99323877821a318cb0d5aa9899c40a44e81ef3","cacbed12b83529ebb99b0297d52b0749","db6d67f55bce0425baef2348e70f1478d022820e","58726aac2652bedfe47b7e1c73ba39d028e2e6ad188f4ed735d614097be4a23b","da3f02b82e982f5ce5a71d769a067f3b","e165cac5ab2b2312f7ed8569c69a75bae48b8316","7164ba41639c8edcd9ff1cf41a806c9a23de566b56a7f34a0205ba1f84575a48","38454291f7b871d71a512b5dd5100d9e","9e9c04f00822aacaa15d0bcc4749f8e6920d4550","45391bfbb06263f421ac739e1e4b438fb99a0757dcecc68de79b2dbe02c1641e","7be2a76577f6ee05ec08c77c41cd9dd4","f3cfca7a2160559aa62b4cf42cd15870a4abcae7","87a923319c6ea74a9cef5ed7528afdbd4a05e7600ce7f4359e5990ff8769a2ff","6e542eda455e8c8600df96874c8deceb","670530d36967c5927955d31052dff165a187c1f2","d755cd96077cebbed84a86e69d1fd84b95e3e5763abc8ac8ec0a7f1df30e9585")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://80.66.75.98/chseiyk.jpeg","http://193.106.191.141/qwewqdsvsf/ap.php")
