index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("155e444417cc138633bdbf2e95834165ef7295290f6da58a1cce3171b61ce2b4","26e0c7319a7f9c3ef6f65f8e585adcc3653c75ea231d87f63182b44cea5b13a1","ab3ed0ffb87999202eb96a163cd50d4f5bd495f5bb09c09efec99b4d8b7abb94","e970ace468aafefe060c00f948098f19e4f7d63ec893a14012a1721b8b208ddb","d5c65e8217250cc4c1d8e762fa7102f14c243f28190d56f3e7f343c5fed7c8b2","e58ff527e1f5775cd2c64ba1c46b8e70102f354cf1f3454c40efaa1b4cbb40d2","e6372b17f1ad0887cb0f77beea5bcb6a16822449304b894641031dc407158cca","bd7cdafc28e0d62cc85ab7e04e7b38e62414ef59d717b2c6f96d4c4490687f8e","5045a339e6162d0f1d028c9b3ffd52f0f4b51e40a6d3070f38f343102efad587","9fb6e7c76771c3d193e94af0c868f2e6ca7e6d864b03e2c20fb115d7554bbde7","7bacab7505d3cf673ba1c5c70bea697e5ad1af2142e9e7c1c5a1e2ecab24e479","702dba8240bca174ef525002da51ce1b478aa5dd165a8e4033cfd17c8f7a761f","6c43a06756179650fcbd257cf8221c9d99f9aa1da4b7014edb20ef5c8d160909","477ff2f8bdbfbea420e16a37704b896c4dfe6d7ec5bc9a070f42a4d94e0bb97a","c222ace386b09a505a9afc71d47f035ca957b288a9d61b375d6ef439098dbd46")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="193.233.255.122" AND destinationport=2314 OR destinationaddress="147.45.47.185" AND destinationport=41702 OR destinationaddress="147.45.47.153" AND destinationport=3605 OR destinationaddress="147.45.47.83" AND destinationport=7622 OR destinationaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="193.233.255.122" AND sourceport=2314 OR sourceaddress="147.45.47.185" AND sourceport=41702 OR sourceaddress="147.45.47.153" AND sourceport=3605 OR sourceaddress="147.45.47.83" AND sourceport=7622 OR sourceaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="193.233.255.122" AND sourceport=2314 OR translatedipaddress="147.45.47.185" AND sourceport=41702 OR translatedipaddress="147.45.47.153" AND sourceport=3605 OR translatedipaddress="147.45.47.83" AND sourceport=7622 OR translatedipaddress="77.91.68.6" AND sourceport=2314)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationport=2314)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND destinationtranslatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND destinationtranslatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND destinationtranslatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND destinationtranslatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND destinationtranslatedport=2314)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="193.233.255.122" AND translatedport=2314 OR destinationtranslatedaddress="147.45.47.185" AND translatedport=41702 OR destinationtranslatedaddress="147.45.47.153" AND translatedport=3605 OR destinationtranslatedaddress="147.45.47.83" AND translatedport=7622 OR destinationtranslatedaddress="77.91.68.6" AND translatedport=2314)
