index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","44e1fbe71c9fcf9881230cb924987e0e615a7504c3c04d44ae157f07405e3598","63788797919985d0e567cf9133ad2ab7a1c415e81598dc07c0bfa3a1566aeb90","9f04525835f998d454ed68cfc7fcb6b0907f2130ae6c6ab7495d41aa36ad8ccf","caab341a35badbc65046bd02efa9ad2fe2671eb80ece0f2fa9cf70f5d7f4bedc","9fdc1dc99bc8184ee410880427dba89c","be570775552f937d8588bceb3e2cbb0c18408fc1","4183edae732506a18b5c802cbf0a471a77c3f1e4336a32ccb4958671e404493c","ad1dc51a66201689d442499f70b78dea","c71bccdc006cca700257a69ed227e0cb1bc071ed","666da297066a2596cacb13b3da9572bf","64b337d7e82c82a4b40c8cb88fbc651929995eef","cf22082532d4d6387ea1c9bc4dc5b255aa7a0290","436587bad5e061a7e594f9971d89c468","4ec4ceda84c580054f191caa09916c68","6505513ca06db10b17f6d4792c30a53733309231")
