index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("90bae9356dc021172d0ff06603e7a4cf,\n7fd07c934ce9b7c4ad902408ed528acf4ce32ddb,\n1d2db070008116a7a1992ed7dad7e7f26a0bfee3499338c3e603161e3f18db2f,\n9d898e39591f9a8b49fa27841acb7392,\ne9b35995bf772cd11be13bc5c9ac93c846f00405,\nb8ffd72534056ea89bfd48cbe6efb0b4d627a6284a7b763fdb7dfd070c1049ba,\nd37b49b0a53fd07895ca4dc956cbc459,\n2f052cc3e64870b8ac28efb2d79bc2b16dff3e8e,\n43c6aef23a90c742274d6db2148a5cb5027c82e94ba2db4ae4b4184956e370b5,\n8ead445620033ecee6c426cfbeac214b,\nb04ccaa781be7521d50faa36db269f71ac56af58,\ncd29a952a51204f2e8744271b822c277b63ad8a54e3a6422e342eb9c53df0bda,\nbf528ecf7601043fe7931ed1fdd1d081,\n3cac81473dd91e7adf4516f1805bc5bdfeb562e4,\nb3324b629febeefb17201abb52bc66094b4ffb292f8aa3a549f39e7e11c63694","708511c356493e41ca103db51b8df3fb57898ddb2bb7cf4f11560facde9425ed")
