index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("aafeaf8bd61f70fc51fbde7aa63f5d8ad96964f40b7d7fce1012a0b842c83273e","5c430e2770b59cceba1f1587b34e686d586d2c8ba1908bb5d066a616466d2cc6","470cd1645d1da5566eef36c6e0b2a8ed510383657c4030180eb0083358813cd3","f229a8eb6f5285a1762677c38175c71dead77768f6f5a6ebc320679068293231","4b78b1a3c162023f0c14498541cb6ae143fb01d8b50d6aa13ac302a84553e2d5","a78cc475c1875186dcd1908b55c2eeaf1bcd59dedaff920f262f12a3a9e9bfa8","02e8ea9a58c13f216bdae478f9f007e20b45217742d0fbe47f66173f1b195ef5","1a87e1b41341ad042711faa0c601e7b238a47fa647c325f66b1c8c7b313c8bdf","fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb","7fc54a287c08cde70fe860f7c65ff71ade24dfeedafdfea62a8a6ee57cc91950","0ff09c344fc672880fdb03d429c7bda4","3bcdb533dd95f15cd3b6953829dc481e","cc8882dfd58b69cbc341065d29f9c1e9","e3886a3f4e671704e306c08d1de3601c","f4840cb32f5a10fb9930ffb48095df30","ff81a65150e318c1ffbeaba7a56bb09f","10d02cf4a73b73628c258d69dbd1a400631e0eb9","2da52586e89a60daf38d72fdcab6b4c4874f653a","5222eb4ee7842919dbc827ed1f83b61c32bf2a54","a210fed76436c11d14629947f9918061d81d3263","c8fbb7c0522a092239ca1eacf7a08e850fbea630","d100ed0899ad0a669bfce037d449687aa35b85ac")
