index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9d5c4544bd06335c2ad2545b0d177218f84b77dd1834b22bf6a4cfe7e1de91fb","04ed1a811b3594f55486a52ab81227089c178f5c73944a3a9665d7052c3b7df9","74b5e2d90daaf96657e4d3d800bb20bf189bb2cf487479ea0facaf6182e0d1d3","0e60d49a967599fab179f8c885d91db25016be996d66a4e00cbb197e5085efa4","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca","b32ae94b32bcc5724d706421f915b7f7730c4fb20b04f5ab0ca830dc88dcce4e","6d6134adfdf16c8ed9513aba40845b15bd314e085ef1d6bd20040afd42e36e40","b9b4766d6b0e63f80d49e969fbd63ae90b0d1e487ef008b55c096bf46395d32e","2e397dcbcc630b492c01af9cb6033edd9c857e2881bead6956e43aefb16b6a21","91745d530a8304742b58890e798448de9fbe4ea0bc057f30ab0beb522b4bb688","2e1fd124f3e9fc238773e49bc971c882464a3686171d18ab2cd6c2859be138d1","0adde4246aaa9fb3964d1d6cf3c29b1b13074015b250eb8e5591339f92e1e3ca")
