index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("26b571773e024a149a1b613f2551af05165667083cc3b7c9cb41f9ae314d205b","1f767316aae3a0479279da1ad3a2caa9f27d97926d97fee1274231294dd8d26a","1786de4db1f1082fcafdd7b1247b981666946b36261ee4a5ed7b14be95239388","7a9aa95f2693d0d066458083f816567ebf1e3c425ca6db2305cd194d8deeffe2","ac84b2a59a3594b3cbea680acc9db4e699c777a1aa1fdb4cbe9c0ae848ffb447","ee5df9dee8c0ee1d506012a9f4cb476eeb7df1ef68bf1d5295290f28910f547b","fdc28116a0002dcb6645515587a2ded98f5b0952a2f9cff69d5893827c322b52","c82954a87a7841c324507daa1403b37f906d95ecd589637c58ff3ec03c496499")
