index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("1f5c0e926e548de43e0039858de533fc","426bbf43f783292743c9965a7631329d77a51b61","668f61df2958f30c6a0f1356463e14069b3435fb4e8417a948b6738f5f340dd9","f6245f64eaad550fd292cfb1e23f0867","fccdc059f92f3e08325208f91d4e6c08ae646a78","e2f87428a855ebc0cda614c6b97e5e0d65d9ddcd3708fd869c073943ecdde1c0","bed245d61b4928f6d6533900484cafc5","e1cf6334610e0afc01e5de689e33190d0c17ccd4","5071022aaa19d243c9d659e78ff149fe0398cf7d9319fd33f718d8e46658e41c","d0f7745c80baf342cd218cf4f592ea00","c0e4dbaffd0b81b5688ae8e58922cdaa97c8de25","bd747692ab5db013cd4c4cb8ea9cafa7577c95bf41aa2629a7fea875f6dcbc41","faf1f7a32e3f7b08017a9150dccf511d","196f35ff6c47bb4002be7d7d71a541afd5d21497","141efc5eb38437b876fd1c82231fe80b836290b5fbe48a5dd57a85e2ce25e12b","67cfecf2d777f3a3ff1a09752f06a7f5","bce22646f0d7c3abc616996cd08b706590e724e1","0aa627736df73c543c26c3f033f1962282dd005e6a0ec8d9357df3511b2fc8a6")
