<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<content>
    <qradarversion>7.2.8.20160920132350</qradarversion>
    <ariel_regex_property>
        <sequenceid>508</sequenceid>
        <creationdate>1516141747489</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>3ab1c989-9a97-4903-94ad-aebe0dc5eeb7</id>
        <username>lookoutadmin</username>
        <description>Lookout event trusted signing identity</description>
        <forceparse>false</forceparse>
        <propertyname>lookoutTrustedSigningIdentity</propertyname>
        <editdate>1516141747489</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>479</sequenceid>
        <creationdate>1489068606534</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>08283b6d-fd94-43b4-a3b0-34c8213223f1</id>
        <username>lookoutadmin</username>
        <description>Lookout event ID</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutId</propertyname>
        <editdate>1499439855104</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>481</sequenceid>
        <creationdate>1490008874359</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>e8446e3a-afb4-47a9-ae7f-ba4db94b5dd6</id>
        <username>lookoutadmin</username>
        <description>Lookout event time</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutEventTime</propertyname>
        <editdate>1499439855145</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>492</sequenceid>
        <creationdate>1490009139286</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>e436b94d-8b25-4e31-b282-984806e3c010</id>
        <username>lookoutadmin</username>
        <description>Lookout event target ID</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutTargetId</propertyname>
        <editdate>1499439855256</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>491</sequenceid>
        <creationdate>1490008663799</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>52ef9f80-94d4-4e02-8259-4ba234cfeee9</id>
        <username>lookoutadmin</username>
        <description>Lookout event severity</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutSeverity</propertyname>
        <editdate>1499439855268</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>493</sequenceid>
        <creationdate>1489403580735</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>a21bead2-b4d9-4675-bb34-b50835cbd341</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: file path</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutFilePath</propertyname>
        <editdate>1499439855297</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>505</sequenceid>
        <creationdate>1490115633433</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>7447da9e-e234-47c1-82d9-21bdfbb73477</id>
        <username>lookoutadmin</username>
        <description>Lookout device event details: security status</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutSecurityStatus</propertyname>
        <editdate>1499439855318</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>478</sequenceid>
        <creationdate>1490097175015</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>c508dbe6-f771-444b-ab55-e25623d355df</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: proxy protocol</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutProxyProtocol</propertyname>
        <editdate>1499439855329</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>497</sequenceid>
        <creationdate>1490010645875</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>ab7b9044-a9e7-4c2c-89c1-d30c52ef9bee</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: DNS IP addresses</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutDnsIpAddresses</propertyname>
        <editdate>1499439855366</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>483</sequenceid>
        <creationdate>1490011273973</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>60225a05-369b-479b-94cc-b5f2e8facfe5</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: proxy port</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutProxyPort</propertyname>
        <editdate>1499439855390</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>486</sequenceid>
        <creationdate>1489069704831</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>7cce8d75-4f51-4be8-b4dd-6450727805ee</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: action</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutAction</propertyname>
        <editdate>1499439855413</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>501</sequenceid>
        <creationdate>1490115508794</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>a5667154-3d7f-4eba-bbbb-bbf92d432cc4</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: file path</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutAppFilePath</propertyname>
        <editdate>1499439855458</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>494</sequenceid>
        <creationdate>1490009335027</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>97e3acb0-4756-41ca-8a84-edf24c080070</id>
        <username>lookoutadmin</username>
        <description>Lookout event target user email</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutUser</propertyname>
        <editdate>1499439855478</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>498</sequenceid>
        <creationdate>1490011188222</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>4d887260-cc29-4b61-aac8-320939135298</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: proxy address</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutProxyAddress</propertyname>
        <editdate>1499439855526</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>484</sequenceid>
        <creationdate>1489068366461</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>48f8cdd0-0354-48cb-835f-c4a5cb61a980</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: threat ID</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutThreatId</propertyname>
        <editdate>1499439855171</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>477</sequenceid>
        <creationdate>1490097071450</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>b5d67017-e4f9-40fa-bb9e-d8973edb6860</id>
        <username>lookoutadmin</username>
        <description>Lookout details: vpn local address</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutVpnLocalAddress</propertyname>
        <editdate>1499439855182</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>488</sequenceid>
        <creationdate>1489077994267</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>8c065935-952d-41ec-8297-f62bac1f5826</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: OS version</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutOSVersion</propertyname>
        <editdate>1499439855194</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>504</sequenceid>
        <creationdate>1490115633433</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>7447da9e-e234-47c1-82d9-21bdfbb73476</id>
        <username>lookoutadmin</username>
        <description>Lookout device event details: protection status</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutProtectionStatus</propertyname>
        <editdate>1499439855206</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>502</sequenceid>
        <creationdate>1490115633433</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>7447da9e-e234-47c1-82d9-21bdfbb73473</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: process details</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutAppProcessDetails</propertyname>
        <editdate>1499439855219</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>503</sequenceid>
        <creationdate>1490115633433</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>7447da9e-e234-47c1-82d9-21bdfbb73474</id>
        <username>lookoutadmin</username>
        <description>Lookout error event short description</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutMsg</propertyname>
        <editdate>1499439855238</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>507</sequenceid>
        <creationdate>1490115633433</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>7447da9e-e234-47c1-82d9-21bdfbb73479</id>
        <username>lookoutadmin</username>
        <description>Lookout device event: updated details</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutUpdatedDetails</propertyname>
        <editdate>1499439855287</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>506</sequenceid>
        <creationdate>1490115633433</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>7447da9e-e234-47c1-82d9-21bdfbb73478</id>
        <username>lookoutadmin</username>
        <description>Lookout device event details: activation status</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutActivationStatus</propertyname>
        <editdate>1499439855308</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>500</sequenceid>
        <creationdate>1490115391484</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>cc6e981b-40bc-43d8-b363-0249e5e14dbc</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: file name</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutAppFileName</propertyname>
        <editdate>1499439855345</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>485</sequenceid>
        <creationdate>1490010750075</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>4818f7d0-de7f-450a-8dea-0a1f060538f4</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: whether vpn present</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutVpnPresent</propertyname>
        <editdate>1499439855402</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>487</sequenceid>
        <creationdate>1490011352466</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>bb8fd2ee-9fe7-4b8a-88b5-b70082999d00</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: SSID</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutSSID</propertyname>
        <editdate>1499439855426</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>489</sequenceid>
        <creationdate>1490010176421</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>099b7a3a-8dd0-4cce-a642-c86a5da8a882</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: file name</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutFileName</propertyname>
        <editdate>1499439855437</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>490</sequenceid>
        <creationdate>1490009903333</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>6ffc8f91-4df4-4cd0-a394-f4caf38bbcac</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: process details</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutFileProcessDetails</propertyname>
        <editdate>1499439855449</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>495</sequenceid>
        <creationdate>1490011122384</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>d4fde46e-a791-4f12-a114-33581d878b7d</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: Mac address</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutMacAddress</propertyname>
        <editdate>1499439855503</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>496</sequenceid>
        <creationdate>1490009238301</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>80885665-f229-42a0-aa44-736f9eae337e</id>
        <username>lookoutadmin</username>
        <description>Lookout event target external ID</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutTargetExternalId</propertyname>
        <editdate>1499439855515</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>499</sequenceid>
        <creationdate>1490009465190</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>1e218ef0-2c86-45d0-b516-21637973941d</id>
        <username>lookoutadmin</username>
        <description>Lookout Ent name to distinguish event</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutEntName</propertyname>
        <editdate>1499439855550</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>480</sequenceid>
        <creationdate>1489403446000</creationdate>
        <database>events</database>
        <datepattern></datepattern>
        <languagetag>en-US</languagetag>
        <propertytype>string</propertytype>
        <id>71d31b2b-c991-4404-baf8-6f8b804964ef</id>
        <username>lookoutadmin</username>
        <description>Lookout event details: classifications</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutClassifications</propertyname>
        <editdate>1499439855127</editdate>
    </ariel_regex_property>
    <ariel_regex_property>
        <sequenceid>482</sequenceid>
        <creationdate>1490009413672</creationdate>
        <database>events</database>
        <propertytype>string</propertytype>
        <id>7b761dc7-3396-4b09-89ac-aa9f951144f2</id>
        <username>lookoutadmin</username>
        <description>Lookout event target platform</description>
        <forceparse>true</forceparse>
        <propertyname>lookoutTargetPlatform</propertyname>
        <editdate>1499439855158</editdate>
    </ariel_regex_property>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>832</sequenceid>
        <regex>([\s\t]lookoutTrustedSigningIdentity=)(.+?(?=[\t]|$))</regex>
        <qid>2000013</qid>
        <capturegroup>2</capturegroup>
        <ap_id>3ab1c989-9a97-4903-94ad-aebe0dc5eeb7</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1516141891085</creationdate>
        <deviceid>-1</deviceid>
        <id>64656213-7e20-4284-a53a-773d370d1706</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515253</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>795</sequenceid>
        <regex>([\s\t]lookoutId=)(.+?(?=[\t]|$))</regex>
        <qid>-1</qid>
        <payload>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</payload>
        <capturegroup>2</capturegroup>
        <ap_id>08283b6d-fd94-43b4-a3b0-34c8213223f1</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489068606534</creationdate>
        <deviceid>-1</deviceid>
        <id>0808d3be-8b3b-4aad-98f0-397f94f7b17e</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855672</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>800</sequenceid>
        <regex>([\s\t]lookoutEventTime=)(.+?(?=[\t]|$))</regex>
        <qid>-1</qid>
        <capturegroup>2</capturegroup>
        <ap_id>e8446e3a-afb4-47a9-ae7f-ba4db94b5dd6</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437166</creationdate>
        <deviceid>-1</deviceid>
        <id>12aee409-e5be-42bd-878e-0a7075bc2a8a</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855816</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>820</sequenceid>
        <regex>([\s\t]lookoutTargetId=)(.+?(?=[\t]|$))</regex>
        <qid>-1</qid>
        <capturegroup>2</capturegroup>
        <ap_id>e436b94d-8b25-4e31-b282-984806e3c010</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437209</creationdate>
        <deviceid>-1</deviceid>
        <id>67f3b18b-e08b-4dd5-a8f3-a32965964e0f</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855919</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>835</sequenceid>
        <regex>([\|]lookoutSeverity=)(.+?(?=[\t]|$))</regex>
        <qid>2000013</qid>
        <capturegroup>2</capturegroup>
        <ap_id>52ef9f80-94d4-4e02-8259-4ba234cfeee9</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1516142515234</creationdate>
        <deviceid>-1</deviceid>
        <id>ff9c248f-a78d-4291-9e37-f51772f7b184</id>
        <rank>5</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515234</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>817</sequenceid>
        <regex>([\|]lookoutSeverity=)(.+?(?=[\t]|$))</regex>
        <qid>2000006</qid>
        <capturegroup>2</capturegroup>
        <ap_id>52ef9f80-94d4-4e02-8259-4ba234cfeee9</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437203</creationdate>
        <deviceid>-1</deviceid>
        <id>627243f0-10ae-4a85-94fd-b83fede29743</id>
        <rank>2</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515226</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>818</sequenceid>
        <regex>([\|]lookoutSeverity=)(.+?(?=[\t]|$))</regex>
        <qid>2000007</qid>
        <capturegroup>2</capturegroup>
        <ap_id>52ef9f80-94d4-4e02-8259-4ba234cfeee9</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437203</creationdate>
        <deviceid>-1</deviceid>
        <id>627243f0-10ae-4a85-94fd-b83fede29744</id>
        <rank>3</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515229</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>816</sequenceid>
        <regex>([\|]lookoutSeverity=)(.+?(?=[\t]|$))</regex>
        <qid>2000005</qid>
        <capturegroup>2</capturegroup>
        <ap_id>52ef9f80-94d4-4e02-8259-4ba234cfeee9</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437203</creationdate>
        <deviceid>-1</deviceid>
        <id>627243f0-10ae-4a85-94fd-b83fede29742</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439856151</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>819</sequenceid>
        <regex>([\|]lookoutSeverity=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <capturegroup>2</capturegroup>
        <ap_id>52ef9f80-94d4-4e02-8259-4ba234cfeee9</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437203</creationdate>
        <deviceid>-1</deviceid>
        <id>627243f0-10ae-4a85-94fd-b83fede29745</id>
        <rank>4</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515232</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>821</sequenceid>
        <regex>([\s\t]lookoutFilePath=)(.+?(?=[\t]|$))</regex>
        <qid>2000006</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>a21bead2-b4d9-4675-bb34-b50835cbd341</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489403580735</creationdate>
        <deviceid>-1</deviceid>
        <id>38327f0c-f56b-4ab4-bc14-144c215d7263</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855860</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>829</sequenceid>
        <regex>([\s\t]lookoutSecurityStatus=)(.+?(?=[\t]|$))</regex>
        <qid>2000012</qid>
        <capturegroup>2</capturegroup>
        <ap_id>7447da9e-e234-47c1-82d9-21bdfbb73477</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437160</creationdate>
        <deviceid>-1</deviceid>
        <id>a7f5ffcc-abf3-41ac-ac89-ed433c9bb3e4</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855929</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>794</sequenceid>
        <regex>([\s\t]lookoutProxyProtocol=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <payload>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</payload>
        <capturegroup>2</capturegroup>
        <ap_id>c508dbe6-f771-444b-ab55-e25623d355df</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490097175015</creationdate>
        <deviceid>-1</deviceid>
        <id>8d3052f3-16c6-4b3c-82a8-95e24fe2e07d</id>
        <rank>-1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855707</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>825</sequenceid>
        <regex>([\s\t]lookoutDnsIpAddresses=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <capturegroup>2</capturegroup>
        <ap_id>ab7b9044-a9e7-4c2c-89c1-d30c52ef9bee</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490011465370</creationdate>
        <deviceid>-1</deviceid>
        <id>425ab31d-6f23-498c-a71e-6445235fc7f3</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855838</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>802</sequenceid>
        <regex>([\s\t]lookoutProxyPort=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <capturegroup>2</capturegroup>
        <ap_id>60225a05-369b-479b-94cc-b5f2e8facfe5</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490011465394</creationdate>
        <deviceid>-1</deviceid>
        <id>c982b413-a7df-4959-8678-7bba2c7d246d</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439856103</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>810</sequenceid>
        <regex>([\s\t]lookoutAction=)(.+?(?=[\t]|$))</regex>
        <qid>2000007</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>7cce8d75-4f51-4be8-b4dd-6450727805ee</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489069704831</creationdate>
        <deviceid>-1</deviceid>
        <id>8bf38205-53b7-47c4-b289-51a944503b21</id>
        <rank>3</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515194</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>811</sequenceid>
        <regex>([\s\t]lookoutAction=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>7cce8d75-4f51-4be8-b4dd-6450727805ee</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489069704831</creationdate>
        <deviceid>-1</deviceid>
        <id>8bf38205-53b7-47c4-b289-51a944503b22</id>
        <rank>4</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515198</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>833</sequenceid>
        <regex>([\s\t]lookoutAction=)(.+?(?=[\t]|$))</regex>
        <qid>2000013</qid>
        <capturegroup>2</capturegroup>
        <ap_id>7cce8d75-4f51-4be8-b4dd-6450727805ee</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1516142515201</creationdate>
        <deviceid>-1</deviceid>
        <id>5db582bd-5eec-4edf-881c-6bf961af17f2</id>
        <rank>5</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515201</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>809</sequenceid>
        <regex>([\s\t]lookoutAction=)(.+?(?=[\t]|$))</regex>
        <qid>2000006</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>7cce8d75-4f51-4be8-b4dd-6450727805ee</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489069704831</creationdate>
        <deviceid>-1</deviceid>
        <id>8bf38205-53b7-47c4-b289-51a944503b20</id>
        <rank>2</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515190</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>808</sequenceid>
        <regex>([\s\t]lookoutAction=)(.+?(?=[\t]|$))</regex>
        <qid>2000005</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>7cce8d75-4f51-4be8-b4dd-6450727805ee</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489069704831</creationdate>
        <deviceid>-1</deviceid>
        <id>8bf38205-53b7-47c4-b289-51a944503b19</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855684</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>791</sequenceid>
        <regex>([\s\t]lookoutAppFilePath=)(.+?(?=[\t]|$))</regex>
        <qid>2000005</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>a5667154-3d7f-4eba-bbbb-bbf92d432cc4</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490115508794</creationdate>
        <deviceid>-1</deviceid>
        <id>906e7b37-612a-4a6d-b0b3-ee878abcacb9</id>
        <rank>-1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439856079</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>822</sequenceid>
        <regex>([\s\t]lookoutUser=)(.+?(?=[\t]|$))</regex>
        <qid>-1</qid>
        <capturegroup>2</capturegroup>
        <ap_id>97e3acb0-4756-41ca-8a84-edf24c080070</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437216</creationdate>
        <deviceid>-1</deviceid>
        <id>6ce52c17-0ebd-40fd-a9ec-6f0affa3e59e</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855872</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>826</sequenceid>
        <regex>([\s\t]lookoutProxyAddress=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <capturegroup>2</capturegroup>
        <ap_id>4d887260-cc29-4b61-aac8-320939135298</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490011465389</creationdate>
        <deviceid>-1</deviceid>
        <id>b8750a34-d5dd-4346-a768-c4809fdf91bf</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855882</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>804</sequenceid>
        <regex>([\s\t]lookoutThreatId=)(.+?(?=[\t]|$))</regex>
        <qid>2000006</qid>
        <payload>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</payload>
        <capturegroup>2</capturegroup>
        <ap_id>48f8cdd0-0354-48cb-835f-c4a5cb61a980</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489068366461</creationdate>
        <deviceid>-1</deviceid>
        <id>fb9c2e49-1c8d-4ed5-a3e9-e4f5c8689252</id>
        <rank>2</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515241</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>803</sequenceid>
        <regex>([\s\t]lookoutThreatId=)(.+?(?=[\t]|$))</regex>
        <qid>2000005</qid>
        <payload>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</payload>
        <capturegroup>2</capturegroup>
        <ap_id>48f8cdd0-0354-48cb-835f-c4a5cb61a980</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489068366461</creationdate>
        <deviceid>-1</deviceid>
        <id>fb9c2e49-1c8d-4ed5-a3e9-e4f5c8689251</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515238</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>806</sequenceid>
        <regex>([\s\t]lookoutThreatId=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <payload>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</payload>
        <capturegroup>2</capturegroup>
        <ap_id>48f8cdd0-0354-48cb-835f-c4a5cb61a980</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489068366461</creationdate>
        <deviceid>-1</deviceid>
        <id>fb9c2e49-1c8d-4ed5-a3e9-e4f5c8689254</id>
        <rank>4</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515247</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>836</sequenceid>
        <regex>([\s\t]lookoutThreatId=)(.+?(?=[\t]|$))</regex>
        <qid>2000013</qid>
        <capturegroup>2</capturegroup>
        <ap_id>48f8cdd0-0354-48cb-835f-c4a5cb61a980</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1516142515249</creationdate>
        <deviceid>-1</deviceid>
        <id>e086dcdd-08d0-44ab-a04c-d450f3c2a1c0</id>
        <rank>5</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515249</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>805</sequenceid>
        <regex>([\s\t]lookoutThreatId=)(.+?(?=[\t]|$))</regex>
        <qid>2000007</qid>
        <payload>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</payload>
        <capturegroup>2</capturegroup>
        <ap_id>48f8cdd0-0354-48cb-835f-c4a5cb61a980</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489068366461</creationdate>
        <deviceid>-1</deviceid>
        <id>fb9c2e49-1c8d-4ed5-a3e9-e4f5c8689253</id>
        <rank>3</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515244</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>793</sequenceid>
        <regex>([\s\t]lookoutVpnLocalAddress=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <payload>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</payload>
        <capturegroup>2</capturegroup>
        <ap_id>b5d67017-e4f9-40fa-bb9e-d8973edb6860</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490097071450</creationdate>
        <deviceid>-1</deviceid>
        <id>f3a7028a-abf3-4c79-8bd7-ecb3a19f04ec</id>
        <rank>-1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855977</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>813</sequenceid>
        <regex>([\s\t]lookoutOSVersion=)(.+?(?=[\t]|$))</regex>
        <qid>2000007</qid>
        <capturegroup>2</capturegroup>
        <ap_id>8c065935-952d-41ec-8297-f62bac1f5826</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437192</creationdate>
        <deviceid>-1</deviceid>
        <id>521ad985-6862-43ae-bb4a-269f29de08e3</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439856015</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>828</sequenceid>
        <regex>([\s\t]lookoutProtectionStatus=)(.+?(?=[\t]|$))</regex>
        <qid>2000012</qid>
        <capturegroup>2</capturegroup>
        <ap_id>7447da9e-e234-47c1-82d9-21bdfbb73476</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437160</creationdate>
        <deviceid>-1</deviceid>
        <id>a7f5ffcc-abf3-41ac-ac89-ed433c9bb3e3</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855942</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>790</sequenceid>
        <regex>([\s\t]lookoutAppProcessDetails=)(.+?(?=[\t]|$))</regex>
        <qid>2000005</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>7447da9e-e234-47c1-82d9-21bdfbb73473</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490115633433</creationdate>
        <deviceid>-1</deviceid>
        <id>7fc9c6b8-09a9-41a5-bf9e-2affcd7e6cf2</id>
        <rank>-1</rank>
        <category>-1</category>
        <username></username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855742</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>789</sequenceid>
        <regex>([\s\t]lookoutMsg=)(.+?(?=[\t]|$))</regex>
        <qid>2000011</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>7447da9e-e234-47c1-82d9-21bdfbb73474</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490115633433</creationdate>
        <deviceid>-1</deviceid>
        <id>7fc9c6b8-09a9-41a5-bf9e-2affcd7e6cf3</id>
        <rank>-1</rank>
        <category>-1</category>
        <username></username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855795</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>831</sequenceid>
        <regex>([\s\t]lookoutUpdatedDetails=)(.+?(?=[\t]|$))</regex>
        <qid>2000012</qid>
        <capturegroup>2</capturegroup>
        <ap_id>7447da9e-e234-47c1-82d9-21bdfbb73479</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437160</creationdate>
        <deviceid>-1</deviceid>
        <id>a7f5ffcc-abf3-41ac-ac89-ed433c9bb3e6</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855990</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>830</sequenceid>
        <regex>([\s\t]lookoutActivationStatus=)(.+?(?=[\t]|$))</regex>
        <qid>2000012</qid>
        <capturegroup>2</capturegroup>
        <ap_id>7447da9e-e234-47c1-82d9-21bdfbb73478</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437160</creationdate>
        <deviceid>-1</deviceid>
        <id>a7f5ffcc-abf3-41ac-ac89-ed433c9bb3e5</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855896</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>792</sequenceid>
        <regex>([\s\t]lookoutAppFileName=)(.+?(?=[\t]|$))</regex>
        <qid>2000005</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>cc6e981b-40bc-43d8-b363-0249e5e14dbc</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490115391484</creationdate>
        <deviceid>-1</deviceid>
        <id>9714f01b-18a4-4264-b35b-7cc79a698f2e</id>
        <rank>-1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855600</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>807</sequenceid>
        <regex>([\s\t]lookoutVpnPresent=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <capturegroup>2</capturegroup>
        <ap_id>4818f7d0-de7f-450a-8dea-0a1f060538f4</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490011465407</creationdate>
        <deviceid>-1</deviceid>
        <id>1559e596-ed59-4f04-8bbd-927b62424bdf</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855965</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>812</sequenceid>
        <regex>([\s\t]lookoutSSID=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <capturegroup>2</capturegroup>
        <ap_id>bb8fd2ee-9fe7-4b8a-88b5-b70082999d00</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490011465403</creationdate>
        <deviceid>-1</deviceid>
        <id>79c106dc-f3b1-4d5e-ba5e-7b43e14d5ef6</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439856043</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>814</sequenceid>
        <regex>([\s\t]lookoutFileName=)(.+?(?=[\t]|$))</regex>
        <qid>2000006</qid>
        <capturegroup>2</capturegroup>
        <ap_id>099b7a3a-8dd0-4cce-a642-c86a5da8a882</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437170</creationdate>
        <deviceid>-1</deviceid>
        <id>247340da-ea91-4edf-8fad-c1138c718926</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855952</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>815</sequenceid>
        <regex>([\s\t]lookoutFileProcessDetails=)(.+?(?=[\t]|$))</regex>
        <qid>2000006</qid>
        <capturegroup>2</capturegroup>
        <ap_id>6ffc8f91-4df4-4cd0-a394-f4caf38bbcac</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437199</creationdate>
        <deviceid>-1</deviceid>
        <id>afe5917b-cf3b-4144-b956-47fec7e07edf</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855828</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>823</sequenceid>
        <regex>([\s\t]lookoutMacAddress=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <capturegroup>2</capturegroup>
        <ap_id>d4fde46e-a791-4f12-a114-33581d878b7d</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490011465384</creationdate>
        <deviceid>-1</deviceid>
        <id>267ce86a-b70a-42aa-a837-348d6cf1156d</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855562</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>824</sequenceid>
        <regex>([\s\t]lookoutTargetExternalId=)(.+?(?=[\t]|$))</regex>
        <qid>-1</qid>
        <capturegroup>2</capturegroup>
        <ap_id>80885665-f229-42a0-aa44-736f9eae337e</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437206</creationdate>
        <deviceid>-1</deviceid>
        <id>4b2cc431-6820-4416-82b8-47497150d3dd</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855753</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>827</sequenceid>
        <regex>([\s\t]lookoutEntName=)(.+?(?=[\t]|$))</regex>
        <qid>-1</qid>
        <capturegroup>2</capturegroup>
        <ap_id>1e218ef0-2c86-45d0-b516-21637973941d</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437160</creationdate>
        <deviceid>-1</deviceid>
        <id>a7f5ffcc-abf3-41ac-ac89-ed433c9bb3e1</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855849</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>797</sequenceid>
        <regex>([\s\t]lookoutClassifications=)(.+?(?=[\t]|$))</regex>
        <qid>2000006</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>71d31b2b-c991-4404-baf8-6f8b804964ef</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489403446000</creationdate>
        <deviceid>-1</deviceid>
        <id>9beffc55-e3c2-446a-88f3-d0e8b6be245d</id>
        <rank>2</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515209</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>798</sequenceid>
        <regex>([\s\t]lookoutClassifications=)(.+?(?=[\t]|$))</regex>
        <qid>2000007</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>71d31b2b-c991-4404-baf8-6f8b804964ef</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489403446000</creationdate>
        <deviceid>-1</deviceid>
        <id>9beffc55-e3c2-446a-88f3-d0e8b6be245e</id>
        <rank>3</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515213</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>834</sequenceid>
        <regex>([\s\t]lookoutClassifications=)(.+?(?=[\t]|$))</regex>
        <qid>2000013</qid>
        <capturegroup>2</capturegroup>
        <ap_id>71d31b2b-c991-4404-baf8-6f8b804964ef</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1516142515219</creationdate>
        <deviceid>-1</deviceid>
        <id>a4da7122-c500-4648-a79b-325795c35bb4</id>
        <rank>5</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515219</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>796</sequenceid>
        <regex>([\s\t]lookoutClassifications=)(.+?(?=[\t]|$))</regex>
        <qid>2000005</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>71d31b2b-c991-4404-baf8-6f8b804964ef</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489403446000</creationdate>
        <deviceid>-1</deviceid>
        <id>9beffc55-e3c2-446a-88f3-d0e8b6be245c</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439855649</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>799</sequenceid>
        <regex>([\s\t]lookoutClassifications=)(.+?(?=[\t]|$))</regex>
        <qid>2000008</qid>
        <payload></payload>
        <capturegroup>2</capturegroup>
        <ap_id>71d31b2b-c991-4404-baf8-6f8b804964ef</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1489403446000</creationdate>
        <deviceid>-1</deviceid>
        <id>9beffc55-e3c2-446a-88f3-d0e8b6be245f</id>
        <rank>4</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1516142515216</editdate>
    </ariel_property_expression>
    <ariel_property_expression>
        <enabled>true</enabled>
        <sequenceid>801</sequenceid>
        <regex>([\s\t]lookoutTargetPlatform=)(.+?(?=[\t]|$))</regex>
        <qid>-1</qid>
        <capturegroup>2</capturegroup>
        <ap_id>7b761dc7-3396-4b09-89ac-aa9f951144f2</ap_id>
        <propertybase>com.q1labs.core.types.event.NormalizedEventProperties$Payload</propertybase>
        <creationdate>1490010437213</creationdate>
        <deviceid>-1</deviceid>
        <id>0afa6263-9c1b-4f90-b703-4fa4418a883b</id>
        <rank>1</rank>
        <category>-1</category>
        <username>lookoutadmin</username>
        <devicetypeid>212</devicetypeid>
        <editdate>1499439856141</editdate>
    </ariel_property_expression>
    <qidmap>
        <id>1180654</id>
        <reverseip>false</reverseip>
        <qname>lookoutConfigurationThreat</qname>
        <ratelongwindow>0</ratelongwindow>
        <rateshortwindow>0</rateshortwindow>
        <lowlevelcategory>18436</lowlevelcategory>
        <catpipename>Echo</catpipename>
        <qid>2000013</qid>
        <ratethreshold>0</ratethreshold>
        <severity>3</severity>
        <qdescription>lookoutConfigurationThreat</qdescription>
        <rateinterval>0</rateinterval>
    </qidmap>
    <qidmap>
        <id>1213500</id>
        <reverseip>false</reverseip>
        <qname>lookoutFileThreat</qname>
        <ratelongwindow>0</ratelongwindow>
        <rateshortwindow>0</rateshortwindow>
        <lowlevelcategory>18436</lowlevelcategory>
        <catpipename>Echo</catpipename>
        <qid>2000006</qid>
        <ratethreshold>0</ratethreshold>
        <severity>3</severity>
        <qdescription>lookoutFileThreatEvent</qdescription>
        <rateinterval>0</rateinterval>
    </qidmap>
    <qidmap>
        <id>1213501</id>
        <reverseip>false</reverseip>
        <qname>lookoutOsThreat</qname>
        <ratelongwindow>0</ratelongwindow>
        <rateshortwindow>0</rateshortwindow>
        <lowlevelcategory>18436</lowlevelcategory>
        <catpipename>Echo</catpipename>
        <qid>2000007</qid>
        <ratethreshold>0</ratethreshold>
        <severity>3</severity>
        <qdescription>lookoutOsThreatEvent</qdescription>
        <rateinterval>0</rateinterval>
    </qidmap>
    <qidmap>
        <id>1213499</id>
        <reverseip>false</reverseip>
        <qname>lookoutApplicationThreat</qname>
        <ratelongwindow>0</ratelongwindow>
        <rateshortwindow>0</rateshortwindow>
        <lowlevelcategory>18436</lowlevelcategory>
        <catpipename>Echo</catpipename>
        <qid>2000005</qid>
        <ratethreshold>0</ratethreshold>
        <severity>3</severity>
        <qdescription>lookoutApplicationThreatEvent</qdescription>
        <rateinterval>0</rateinterval>
    </qidmap>
    <qidmap>
        <id>1213502</id>
        <reverseip>false</reverseip>
        <qname>lookoutNetworkThreat</qname>
        <ratelongwindow>0</ratelongwindow>
        <rateshortwindow>0</rateshortwindow>
        <lowlevelcategory>18436</lowlevelcategory>
        <catpipename>Echo</catpipename>
        <qid>2000008</qid>
        <ratethreshold>0</ratethreshold>
        <severity>3</severity>
        <qdescription>lookoutNetworkThreatEvent</qdescription>
        <rateinterval>0</rateinterval>
    </qidmap>
    <qidmap>
        <id>1506949</id>
        <reverseip>false</reverseip>
        <qname>lookoutDevice</qname>
        <ratelongwindow>0</ratelongwindow>
        <rateshortwindow>0</rateshortwindow>
        <lowlevelcategory>18436</lowlevelcategory>
        <catpipename>Echo</catpipename>
        <qid>2000012</qid>
        <ratethreshold>0</ratethreshold>
        <severity>3</severity>
        <qdescription>lookoutDeviceEvent</qdescription>
        <rateinterval>0</rateinterval>
    </qidmap>
    <qidmap>
        <id>1414599</id>
        <reverseip>false</reverseip>
        <qname>lookoutClientError</qname>
        <ratelongwindow>0</ratelongwindow>
        <rateshortwindow>0</rateshortwindow>
        <lowlevelcategory>18436</lowlevelcategory>
        <catpipename>Echo</catpipename>
        <qid>2000011</qid>
        <ratethreshold>0</ratethreshold>
        <severity>3</severity>
        <qdescription>lookoutClientErrorEvent</qdescription>
        <rateinterval>0</rateinterval>
    </qidmap>
    <dsmevent>
        <id>566786</id>
        <credibility>0</credibility>
        <qidmapid>1180654</qidmapid>
        <customevent>true</customevent>
        <deviceeventcategory>CONFIGURATION</deviceeventcategory>
        <unravelevent>0</unravelevent>
        <devicetypeid>212</devicetypeid>
        <deviceeventid>THREAT,CONFIGURATION</deviceeventid>
    </dsmevent>
    <dsmevent>
        <id>560448</id>
        <credibility>0</credibility>
        <qidmapid>1213500</qidmapid>
        <customevent>true</customevent>
        <deviceeventcategory>FILE</deviceeventcategory>
        <unravelevent>0</unravelevent>
        <devicetypeid>212</devicetypeid>
        <deviceeventid>THREAT,FILE</deviceeventid>
    </dsmevent>
    <dsmevent>
        <id>560450</id>
        <credibility>0</credibility>
        <qidmapid>1213501</qidmapid>
        <customevent>true</customevent>
        <deviceeventcategory>OS</deviceeventcategory>
        <unravelevent>0</unravelevent>
        <devicetypeid>212</devicetypeid>
        <deviceeventid>THREAT,OS</deviceeventid>
    </dsmevent>
    <dsmevent>
        <id>560447</id>
        <credibility>0</credibility>
        <qidmapid>1213499</qidmapid>
        <customevent>true</customevent>
        <deviceeventcategory>APPLICATION</deviceeventcategory>
        <unravelevent>0</unravelevent>
        <devicetypeid>212</devicetypeid>
        <deviceeventid>THREAT,APPLICATION</deviceeventid>
    </dsmevent>
    <dsmevent>
        <id>560449</id>
        <credibility>0</credibility>
        <qidmapid>1213502</qidmapid>
        <customevent>true</customevent>
        <deviceeventcategory>NETWORK</deviceeventcategory>
        <unravelevent>0</unravelevent>
        <devicetypeid>212</devicetypeid>
        <deviceeventid>THREAT,NETWORK</deviceeventid>
    </dsmevent>
    <dsmevent>
        <id>560452</id>
        <credibility>0</credibility>
        <qidmapid>1506949</qidmapid>
        <customevent>true</customevent>
        <deviceeventcategory>DEVICE_STATUS</deviceeventcategory>
        <unravelevent>0</unravelevent>
        <devicetypeid>212</devicetypeid>
        <deviceeventid>DEVICE,DEVICE_STATUS</deviceeventid>
    </dsmevent>
    <dsmevent>
        <id>560451</id>
        <credibility>0</credibility>
        <qidmapid>1414599</qidmapid>
        <customevent>true</customevent>
        <deviceeventcategory>CLIENT</deviceeventcategory>
        <unravelevent>0</unravelevent>
        <devicetypeid>212</devicetypeid>
        <deviceeventid>ERROR,CLIENT</deviceeventid>
    </dsmevent>
</content>
