index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("6227cb77cb4ab1d066eebf14e825dbc0a0a7f1e9","64171d46c8290c5cd88e0fbce9e23dcecbe20865","65e4d507b1de3a1e4820e4c81808fdfd7e238e10","9bb8977cd5fc7be484286be8124154ab8a608d96","02aebc3762e766be0ac24ef57a135398344a8f7e","04aa241c574f0a7ec93ba5d27807d8e78467f21e","16f94f0df6003f1566b2108f55e247f60a316185","1db21dbf41de5de3686195b839e74dc56d542974","28765121730d419e8656fb8d618b2068408fe5ae","291af8adf6fa078692d0bf5e0d9d00c376bb3fff","316ac8215095a24429632849407311b18a16e0cf","351febd645c66a3c9a79253d0aefcce8ff77054c","3771319be1c8883610c65977811e93b0bdaddf6f","4181bc848a1cd32911a83e02feac9b8abbd69ae2","43b4dbc71ada99a7b8a8d6d0490ba5526a34f9a0","4b1ea5e7b28eb110d8741b76d34f7dbae6f13b79","4c89beab00e3119cf516d6f98d364a5d99232181","5ddcbe4b591293f7b34fc0ef65db6248bcc67eb6","64171d46c8290c5cd88e0fbce9e23dcecbe20865","7ab39d7aad49abb0f626383ed776fe20a3b4c8f3","88075bbc34655d1fa2a750f3bbdee38214974009","8b5844fcbf6af23bc0b410fc180e7e6bdd4f35c7","8ebe1a71af1061d9e943bdff46c5ed954d8c9348","937f6068df4e091cf92d50afb3c6b7cad1de6230","9bdea37835cdb7f0b291891386af28184ac85f79","a6b66b8b7eae2969fd7237888d30766baa1b2274","be47b0c2fb328a338874f6efbe8305ddb74f6a48","c38fc109e31c9d67a1efc6cb767f826b7e46fb19","c54e214810ca7042d013845076b0360bdd7132b2","c83651d7706efa8c115f2a0edb07f863f4e79ce5","d53b7d0030a095a3ffa4b67d13de82d08adda248","d61bf187c4cd3f9953b567b3ad320b9ecde1c347","d9037e0de902e6f7b6c5f1b3269ba482f5e67c8a","dc94eaa39e11f2ca7739d2cfded9eec1967f33ee","dd8db29e90c6b52ee3d2723cc168cf33ee0bb521","e17ddb6515f2d399552245191f98458b68fece7b","ef03b84048193a158ecf1f7033ab0cc8869dd2a5","f61589b1f86d8692964a6bd3e96ddadbe22994eb","fb488cdfd2e475f0d5cbecfe11e9bab2241f9d50")
