index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("c4da41d0f40152c405ba399a9879d92b05ac1f61","ba4685594714e3ffde4f52a82cc07c6f94324215","a60c6a07d3ba6c2d9bf68def208566533398fe8f","dd389b5f3bb7e946cc272bf01d412d661635f10b","9a9f52554c1a9938725b7dabd0f27002b0f8e874","e573f4c395b55664e5e49f401ce0bbf49ea6a540","71a528241603b93ad7165da3219e934b00043dd6","74bc31f649a73821a98bef6e868533b6214f22a4","b23d0939b17b654f2218268a896928e884a28e60","093902737a7850c6c715c153cd13e34c86d60992","5d1f44a2b992b42253750ecaed908c61014b735a","8057d42ddb591dbc1a92e4dd23f931ab6892bcac","eeafb2d4f6ed93ab417f190abdd9d3480e1b7b21","3922461290fa663ee2853b2b5855afab0d39d799")
