index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("6d27c1b457a34ce9edfb4060d9e04eb44d021a7b03223ee72ca569c8c4215438","226bec8acd653ea9f4b7ea4eaa75703696863841853f488b0b7d892a6be3832a","ff900b9224fde97889d37b81855a976cddf64be50af280e04ce53c587d978840","cf9410565f8a06af92d65e118bd2dbaeb146d7e51de2c35ba84b47cfa8e4f53b","1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845","0dbfd3479cfaf0856eb8a75f0ad4fccb5fd6bd17164bcfa6a5a386ed7378958d","6698f8ffb7ba04c2496634ff69b0a3de9537716cfc8f76d1cfea419dbd880c94","b8e456861a5fb452bcf08d7b37277972a4a06b0a928d57c5ec30afa101d77ead","6b3bf710cf4a0806b2c5eaa26d2d91ca57575248ff0298f6dee7180456f37d2e","6b771983142c7fa72ce209df8423460189c14ec635d6235bf60386317357428a","627b920845683bd7303d33946ff52fb2ea595208452285457aa5ccd9c01c3b0a","40d11a20bd5ca039a15a0de0b1cb83814fa9b1d102585db114bba4c5895a8a44","159fbb0d04c1a77d434ce3810d1e2c659fda0a5703c9d06f89ee8dc556783614","9aa38796e0ce4866cff8763b026272eb568fa79d8a147f7d61824752ad6d8f09","1ada91cb860cd3318adbb4b6fd097d31ad39c2718b16c136c16407762251c5db","be6416218e2b1a879e33e0517bcacaefccab6ad2f511de07eebd88821027f92d","9a7889147fa53311ba7ec8166c785f7a935c35eba4a877c1313a8d2e80e3230d","f6a2ec226c84762458d53f5536f0a19e34b2a9b03d574ae78e89098af20bcaa3","1942aac761bc2e21cf303e987ef2a7740a33c388af28ba57787f10b1804ea38e","f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f","037f9434e83919506544aa04fecd7f56446a7cc65ee03ac0a11570cf4f607853","980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2","603fcc53fd7848cd300dad85bef9a6b80acaa7984aa9cb9217cdd012ff1ce5f0","64aac04ffb290a23ab9f537b1143a4556e6893d9ff7685a11c2c0931d978a931","f59c45b71eb62326d74e83a87f821603bf277465863bfc9c1dcb38a97b0b359d","66bb57338bec9110839dc9a83f85b05362ab53686ff7b864d302a217cafb7531","806f64fda529d92c16fac02e9ddaf468a8cc6cbc710dc0f3be55aec01ed65235","25294727f7fa59c49ef0181c2c8929474ae38a47b350f7417513f1bacf8939ff")
