index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("8727091cbb89e5e31eeb2503ffaa242601c8840eee0973fd62fedf1b4b58ab44","f912cd2a6cd21e828dc32b97eac0ce9b2c4e8d5a7944deaa4bd61f41ab8e1997","aee45cc2540d49a28e765c30f1c4d0b853c1a74ea2260bd7614ece8e54c3bcb3","8d76a9a577ea5ad52555a2824db6f5872548fe4bcc47d476cae57603386c4720","464d6aa8389dad3aebc36f748f6687cb57432ee791b84ff18b3dd5a342ce23a0","506dc9f186f820b5e1d39e5f553949415ced6c34d1ef4f4f723ce9d6558cfc5d","877a01b2b6b79572100ba61d799d08569063910a7f56e199bf4805cf0943e140","31485a7ce7e5b4ae39ee06c8c425fe9090d1520b062b4941ad37233cc4851fe6","9adae78f48f24419b6f8a895c1244a1576a4c7fe73e9bc32136893630ce735bd","b7fbf5561006e41d56bde9e26895c8be3a3853436870e86f6929f51b719089d9","8fa93ce6b9dcf00ecf853f266f68aa033b057187c2061b950367c9ec9891571e","e43db9691d7947f7edadb0f9ae8317301aeaea7604f74e69dbcb4b23420e4cbe","6a8ef9185b85490a258eda096777ba0805394e587cf8a0f8f800b87e0594edca","077621c13e3688eb4959b66a1f6f18f3791e5d869e8f064a72498d70b2e36727","39b8c17d79733974ced9a4beeb112d888174b7addca6cea008eea3846fa33658","3a86c8c0e96ef1984177c41c87dec40fe0df3fe71b8ef951063312010c86c9bb","f36dda3b97266a6a30d905c73e1f8a45c4b6681e81fb2f8f59b622de899c4421")
