index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("c49d4acad68955692c32d5fa924eb5bb3f95a192d2c70ff6b0b2ce63c6afe985","be588c14f7ed3252e36c7db623c09cde8e01fa850c5431d9d621ac942695804d","0a0fefb509a85c069539003c03c4f9c292d415fb27d18aef750446b63533b432","84e9eb9615f16316adac6c261fe427905bf1a3d36161e2e4f7658cd177a2c460","296b294a5fed830c2ff1fac9cb361a2d665b70f2f37188b593b5d1401cd6ca28","225b7abe861375141f6cfebde4981f615cb2aa4d913faf85172666fa4b4b320b","d1deeaf0f1807720b11d0f235e3c134a1384054e4c3700eabab26b3a39d2c19a","20987f7163c8fe466930ece075cd051273530dfcbe8893600fd21fcfb58b5b08","88e28107fbf171fdbcf4abbc0c731295549923e82ce19d5b6f6fefa3c9f497c9","39c1f38d0bdc70e50588964ccf3e63dabb871dca83392305a0c64144c7860155","2eabe990f91bfc480c09db02a4de43116b40da2d6eaad00a034adf4214dac4d1","9faeb1c8a4b9827f025a63c086d87c409a369825428634b2b01314460a332c6c")
