index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("7a8db5d75ca30164236d2474a4719046a7814a4411cf703ffb702bf6319939d7","d95e82392d720911f7eb5d8856b8ccd2427e51645975cdf8081560c2f6967ffb","fcadcee5388fa2e6d4061c7621bf268cb3d156cb879314fa2f518d15f5fa2aa2","f37b158b3b3c6ef9f6fe08d0056915fc7e5a220d1dabb6a2b62364ae54dca0f1","e0a4f1c878f20e70143b358ddaa28242bac56be709b5702f3ad656341c54fb76","cf42af2bdcec387df84ba7f8467bbcdad9719df2c524b6c9b7fffa55cfdc8844","c215c0838b1f8081a11ff3050d12fcfe67f14442ed2e18398f0c26c47931df44","9b15cb2782f953090caf76efe974c4ef8a5f28df3dbb3eff135d44306d80c29c","56fd2541a36680249ec670d07a5682d2ef5a343d1feccbcf2c3da86bd546af85","1fbf01b3cb97fda61a065891f03dca7ed9187a4c1d0e8c5f24ef0001884a54da")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://discussiowardder.website/api")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://discussiowardder.website/api")
