index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("2cf91981ca2e2d726c32543af6417d17","a28c8eef1dde99e1c5eb5c165931a391","d7ce6eb241c8d1ceb14b3d112c8f4a78","4c9908656905016acaf1ba84d0b38ba6","3ce9c20950f4c88365f5b00821fb82bc","cb9e877002111c6a01bf2a7c52071e94","163f70c5a5a9c266a470da5b913cc415aa829f96551010becb297b0519553c60","cc5fb1d3eb7c98e5917b9938d48201f4fb505692f36548c55ca6a8760bd9b9d5","379c4cc1f342db17d4ce12d23b5c5ec7927cc6b8b7ffdbe94dea4d05d87249b0","658849d3fcdecf3a960c712819bc8e2eca2e0b53e6313e77edd3410dfd2468e8","d39ae2052fefa45cbbd4a79e787b7e8b5821b6dc85e51760b0fdd8d6e0e24569","9bb2e96507b9b41d965d2d427497b54fb3eb90ef95fe2bc292175178851bbc4f","b5176726712d6c3c3984bd273777a047334fe89a","04a4079fcd47a77d9f24b68c4c7f08f37eeab0ee","6b69360a095bf4066a9c063909cb4085d28843cc","a9b3f47da19f997a6605a7206a5945bdb27fb7d1","24cf02e964179a1675e7eac602beb6794f972c9d","2618e2cff44e484ff5e7197e1b03455f149f4e0f")
