index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("a710ed9e008326b981ff0fadb1c75d89deca2b52451d4677a8fd808b4ac0649b","36d3b20e9380aaaac9151280b4ac3e047a0871efbb158f04344946ff67176a48","085ad59bb8d32981ea590a7884da55d4b0a3f5e89a9632530c0c8ef2f379e471","6606d759667fbdfaa46241db7ffb4839d2c47b88a20120446f41e916cad77d0b","6e5a6629b5ec2eea276fe93553d31f3d23885b214db0a4c2c9201f65180d767f","d5746d9f3284dadf60180f7f7332a08895c609520e0c2327918f259d182cbaf6","f47e3555461472f23ab4766e4d5b6f6fd260e335a6abc31b860e569a720a5446","28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063","6b93e585479a3c5b9a8edbe2b11a8371cb028e8b196acb1c16a425e8d8530cd7","abbe5619e1d7a08f807b57d0949a7f97108a546a415778f25ed35f31ee2cd2f5","c3405d9c9d593d75d773c0615254e69d0362954384058ee970a3ec0944519c37","15348e1401fe18b83e30a7e7f6b4de40b9981a0e133c22958324a89c188f2c49","14f0c4ce32821a7d25ea5e016ea26067d6615e3336c3baa854ea37a290a462a8","9b1df0db16b3b73fe3549856fb4a74414faecffabee0d001865e05b93dda14ec","2c656109db6d2059c41a50e623ceb5e656ff764c44b1e1dbf41131f0206f8238","51f2d5fba3d02cba1c99cf2dfd9968b98d0047f501b54b9531e7ad2719706e47","c7440e621d1c5e90ca4963a4b3b52d27bac05a44248ca88dd51510489d1171bb","22436fe549d791caa3007b567d28d51c8c75869519019c40564af4de53490fa2","3e92ca5b4069eba89d9fcfd7885924282fdf6ca26d0ff8d0502973d9c9bc1fef","3c300726a6cdd8a39230f0775ea726c2d42838ac7ff53bfdd7c58d28df4182d5","9875d1947b8d18974c938721c273d9322fc9af36be96e0ec696daac2929bb802","ff547a7803cd989f9f09a22323ec3f7079266b9a20a07f2c6f353547318ff172","9e18fcc595d4e158ac7aa9250e45145445b31018b35d6ed91239da2b931b5c37","e5f985b5a1f4f351616516553295e1224a02219825c35e3c64b55ecdc8a0d699","90cdcf54bbaeb9c5c4afc9b74b48b13e293746ee8858c033fc9d365fd4074018","4f4864a1d5f19a3c5552d80483526f3413497835549dce8c61fef116b666fa09","5748bfb17e662fb6d197886a69df47f1071052c3381eb1c609a2bc5dba8c2992","6492e765829974c4a636bff0e305261b18eea92fcb1df6fff69890366efc972d")
