index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("814efbd86c0d4e11bfeb5b4bc06c1b6f378455837789637ce581b22777b3a81f","31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc","66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a","bd2c2cf0631d881ed382817afcce2b093f4e412ffb1703719e2762f250abfea4","a201f7f81277e28c0bdd680427b979aee70e42e8a98c67f11e7c83d02f8fe7ae","87bfb05057f215659cc801750118900145f8a22fa93ac4c6e1bfd81aa98b0a55","0c9aef61f05ff9f72af2fce242d99e7dcc8d708b7e2f2bbaacdcf78928790129","2e343f71bc6e378ca85932ffc75c4e64466ada12e6551901abf2c40c92eff803","31eec61ed6866e0b4b3d6b26a3a7d65fed040df61062dd468a1f5be8cc709de7","38514f16f9eac49a8bd59cfe7785a74b5eb0b6af88d0a3ea505a1997dab0bd91","4409ed54c6c764cc47a7f60330435bdf96ccb2d1067707ffed1157fbf4def30f","4e87a7fbebdd3d228fd72c3ff62ceb8513294dd665ff66b91f19d0016df7d3f1","5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd","6601d0f499817ef4f36f54f667b1908ca15ec4af48e19985714a48a978aa81c0","941a95c85a4b37bff4571d49eb918a5094a032ac1416bded3a3cd3427ecf984c","e09dc5807f2178ea60635e2000492d9e9b436d70e3109000219dd2fa4f85ef17","ee5ec8e2ce1512aa3d5efad8ae655e56ef5a9e3de5b14f2a6b2e2a56197f45f2","f5aae666134aaa7d2cc2caf080f1ab3bd28a46b7232c40a9329a897ea87022ab","fa4f4620a4bc6c2625f8e13214e424b1717d5cf1fecf17e5cc1bddfb9f51855f")
