index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("4db090498a57b85411417160747ffd8d4875f98b3ca2b83736a68900b7304d2b","f58af71e542c67fbacf7acc53a43243a5301d115eb41e26e4d5932d8555510d0","e4c44d0f462fce02b2c31555b12c022cdd6eae6492fd3a122e32e105fc5a54f8","f5df98b344242c5eaad1fce421c640fadd71f7f21379d2bf7309001dfeb25972","44994c720ad936809b54388d75945abd18b5707e20c9ee8f87b8f958ca8f5b16","0dfe23ab86cb5c1bfaf019521f3163aa5315a9ca3bb67d7d34eb51472c412b22","56dfe55b016c08f09dd5a2ab58504b377a3cd66ffba236a5a0539f6e2e39aa71","ad158a9ef5e849f7a2d10828a9aed89ebded7a2b5b3abb765f5797051cdf4a20","451a42db9c514514ab71218033967554507b59a60ee1fc3d88cbeb39eec99f20","dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474","df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403","80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9","d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7","1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba","b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845","c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c","b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32","8e8f463c37ea7133194731bfe4490e6713dd0133f30fe08a6d069d10fa7db2c6","941b0bb479946c833a0436ecb84b94c8468c86c40016f46029e8bf04a22a754e","04b14ead49adea9431147c145a89c07fea2c6f1cb515d9d38906c7696d9c91d5","849ef3cf2c251f6088d735c7b67c3434e915a1d924efecf4d608dbe9bb01928a")
