index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("e24fe0dd0bf8d3943d9c4282f172746af6b0787539b371e6626bdb86605ccd70","1458b6dc98a878f237bfb3c3f354ea6e12d76e340cefe55d6a1c9c7eb64c9aee","2755e1ec1e4c3c0cd94ebe43bd66391f05282b6020b2177ee3b939fdd33216f6","7bbb06479a2e554e450beb2875ea19237068aa1055a4d56215f4e9a2317f8ce6","1612ab799df51a7f1169d3f47ea129356b42c8ad81286d05b0256f80c17d4089","09bf891b7b35b2081d3ebca8de715da07a70151227ab55aec1da26eb769c006f","b43e7d481c4fdc9217e17908f3a4efa351a1dab867ca902883205fe7d1aab5e7","8eea1f65e468b515020e3e2854805f1ef5c611342fa23c4b31d8ed3374286a90")
