index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("50e5dec57451005668704281688ca55d","6fd558cf3add096970e15d1e62ca1957","407ea767aa26ae13f9ff20d0999c8dda","654a71f3ed35d920b4176fec9a5a22ad","b93f78a3953216d9d7b2641052ee2fbd","1fa72ca7645f9288f471e52d973d5c86","6dfd06fe70cb840c97edb292ac4272ca","64542b6e6890c7dee27bfc81b0ee3afd","64fb5559cc2312e5b7ad86b13979486a","c929bb1946ed66780816df986e5a6d11","2502cd18ad7db0536b3950bdbd66bf6cae488811","6788ca2bc6b0e44779cc8f39a6af6e4586e6e298","07e615132ef78e827047ffc4cc6c9d44f5a976fd","c3f9c359b80889fe693c87654afcef6a0da537f4","78e95fabcfe8ef7bb6419f8456deccc3d5fa4c23","67dd4ac7eb8c193b39149b34d3a0d5bc21c3f200","ef8438219728dc2a759bd58ae168488e85f4599c","d1669609fb605781218a19dd76630cd8eb3ee3f1","ace1e4a0e18b961b6d332b2e51fa28b8ddf32da2","759257dafd40e5f666a898d15b9fb5ab50064793","062683257386c9e41a1cd1493f029d817445c37f7c65386d54122fa466419ce1","a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0","f2198deecddd5ae56620b594b6b20bf8a20f9c983d4c60144bc6007a53087ce4","6de82310a1fa8ad70d37304df3002d25552db7c2e077331bf468dc32b01ac133","d212718eb644c7803f73dc13b55536e84263a3f959219bd067dc4092a2095b15","0c52f70b4c340274208310ef1c9c09eee3124fb58063aee0c010a9645e417650","874d3f892c299a623746d6b0669298375af4bd0ea02f52ac424c579e57ab48fd","e4f4edade31b3cf1f765a4a51d436ebb072ee177a9a0aa3ce8e3eec582da5396","41e187191625d749b89a11bc04fc0b2a3b9bd638035d05b39365c47ab36d1898","2563ce2261093547699925be122af7c5b3ba5292a3822d6b9aaef4897e18e6dc")
