index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("2da32a4c9e2c3f345f46c6e06d6eb41e13da13d9","ad888d4e2b05bee35acf61c3cc053ecdc5e6ffaf","31abb6e4399138b33545ab5dfa3e12fe1ad4d16e","d4a94f63a25891377334909cd544656b16c2b198","ba5c8b0b76b798dea60110a296ba842702aacfa5","d94e7e9f1965c248e17a6629c68f55ffa810e5d5","f1317027456e02fa5c6cadaf897244fc28c24e31","663d74c7b76e5aae72ed45b3680fa3efbd17586d","909927bd61f3466d777bbbff38fd844ed8f5c134","c6693fa7d0272562dd56ce8b44c0e99dd1210e43","e762e1456a89218661f97e3ae356c07d35c298e8","24e376fbbb4c76b6b3c2572efeaa68053fa35202","7333b0ec183d34a104fd7b9a5f5b93541d39fed3","8f1311588eae8e2fb4eff6dad523198d49d4a766","5500ca40b5537f5b6782a143e8e2e9028b92de2d","c6c77b4385978ab9cc1cab0826e75227d612b62a","9ccc6f5756bb99c5a4eea9e6abc84b79cb3ae6bd","8f1d36b074f2f6b7bc28718f88849a6aeb9dbbc6","717fa522c6ee505002bf17d3e79385544834461e","245f07892c85807e99a3d9da49677bbd6013ff4f","5117a318483b62cd40298358618e57350cc4158a","7165b6329ae524392812c534f9bb7e225e305ffe","f6fda33768f859bc0b42bae40ac0c7dafa0f8d93","e70476edc973548abba035993638c1bf3b829d54","c1be7a6bd11236d1302fc6c0b206ec70b3b66d25","55f6b8f098ce173f4bfba374fc6da3cd8e0ff435","d80e1abd7efcd1304a3b5ce1f6302d3a7edaaad9","13c0ff1347fe631974797aba94d17180ccc8eded","6f819af455a3b25edc1f27c938cbaaffdbf3d910","401b2fcd9359215f2f70f39d7d0aa1d50ab09b43","d0c75071fc20f03d1b6d35ce7240b03c2a79f5c7","ed6e04e810ff085a1a208788e47cce9352ab58bf","1d5da7f3fbea3d3915bddeb4c223ba147667a6ba","fa562e9f3374055812c463b8e36c113a2aafa61c","3198a29d70628d1b9feaf8f7215c667383007f48","94836b8471a22563c91d35df6f3a1f5b8e028aa7","79c4359c0c21c4a6c43062a6e9e894ca0bd5617a","562238aff7746bdc60f891670c0c8bff46cebe02","96b336c4fddbd1d91a9d1eacb4c36441880ac5bf","445922433303e38e227121046d38dd3f31a1d6e0","30fb4cb07089d4e5773e1f20f0a0b25c34aa20ea","9300a1ff6bc49aa3f0bfe46245a470f14fc7fac3","dba623bdad6bdb37359e047efcda34de4af5f518","9526b820a21fa70641361e061b0f99517ab1b184")
