index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("cd9d88cccd85209966c5a35aba7751b962bcc021a4216d6addfc0c3462ce80da","05b82d46ad331cc16bdc00de5c6332c1ef818df8ceefcd49c726553209b3a0da","0d9089efe2a28630bc21d8db451ec14dc856c2d40444292c42e7cca218c7029e","e44ec82d0d80c754afcd7ed149c263c55d158259","59a97f9d7c1d6e10fa41ea9339568fb25ec55e27","23873bf2670cf64c2440058130548d4e4da412dd","3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71","82780c0c1c0e04d994c770a3b3e73727528b0451","5f9dfd9557cf3ca96a4c7f190fc598c10f8871b1313112c9aea45dc8443017a2","5fba25759423f9efc92592977f6c9ff77d47a20aa8ec8e9cd17d5cfa786a1852","f9ab649acfe76d6ac088461b471e5d981bdc8b71d940e94c63bc1988a2ed4678","3f90fd241e9422cc447b5ccdcb87d72507f37e6f","13112e672d807fa7c7f8a383ecfa31e85b880e5a","6042a84529958a04a2d46384139da3ef016bf9498e791cd5e34dfecec2baa1d2","f24ca204af2237a714e8b41d54043da7bbe5393b","d76c74fc7a00a939985ae515991b80afa0524bf0a4feaec3e5e58e52630bd717","d48c7f13db60ef615e59773c442485e84acef09343375d0d8a462b285e959baa","17d9200843fe0eb224644a61f0d1982fac54d844")
