index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f1f6bb1bdf41217d26ec33e00e1e52fbc479e636b5d43671736905210fc4d734","a5a0bee3304c77bdb5b6dcc4edafbfc941cdc0b5153e3d82e2689150e83b1329","6b13519a3aea8747400932191048d5dab7daccb3fd45a3f5e0ffd34c32aed35d","d465f6da893f2f76cdfb7089c3b9292d09a201e7d0faefb0f88a8b8ba5fd3fba","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","e15ee2e8ed2c3f37c1b47bf67e81aa2e89b0ce7b3159918a32da2e30420e6819","dd657a7a3688d039f0a208f39b1128ec447689ee664c6695d5c7e384dcdc1014","fc6847a8b62af02c2d1eff1d77f7d8b90cbd34654aff38c671d86194d351cd6e","4c750b8471bfec0ed2dcf1a856163601fc140eb892710b8415d505a9088bd7f3","d5a8b6635240cc190bc869a2a41bc437a48bfbfcce0d218b879d9768d85d1d6f","f7cc627464981b8918347487bdc73c2026b645fd31a1fbab4d5fcc03cbe88901","256357877ae60db9ad247aef686aa3aaecb7de0fdb84ed35ea91b28be9725e36","7ee465b6132819063b741d7f60246a539a1624e0667098bb162e22de0d06cf2e")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://123.60.168.69:443/jquery-3.3.2.slim.min.js")
