index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("cd8f394652db3d0376ba24a990403d20","f716b30fc3d71d5e8678cc6b81811db4","c018c54eff8fd0b9be50b5d419d80f21","adfa40d44a58e1bc909abca444f7f616","2b86adb6afdfa9216ef8ec2ff4fd2558","7b6678a1c0000344f4faf975c0cfc43d","bc07686b422aa0dd01c87ccf557863ee62f6a435","e91e4df49afa628fba1691b7c668af64ed6b0e1d","4d7c4bc20e8c392ede2cb0cef787fe007265973b","a9b5b16769f604947b9d8262841aa3082f7d71a2","20c9c04a6f8b95d2f0ce596dac226d56be519571","6eceb78acd1066294d72fe86ed57bf43bc6de6eb","740e0d2fba550308344b2fb0e5ecfebdd09329bdcfaa909d3357ad4fe5552532","358f0f8c23acea82c5f75d6a2de37b6bea7785ed0e32c41109c217c48bf16010","7dc25602983f7c5c3c4e81eeb1f2426587b6c1dc6627f20d51007beac840ea2b","8933477e82202de97fb41f4cbbe6af32596cec70b5b47da022046981c01506a7","182d6f5821a04028fe4b603984b4d33574b7824105142b722e318717a688969e","90d96bb2aa2414a0262d38cc805122776a9405efece70beeebf3f0bcfc364c2d")
