index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("1ef7419804e401fbb3860862c2b2fbc1ec3c4650fe24fb44f787f81acf6ad65b","b14a23d0d77a45f4df4889b0c2d239fb118f9d16f944571a8b4d08603d16fb41","9698d561de233038cf922bode4a0bbb8e5723c800b4bc04c7ac82d92cb715dfd","42aaacf6871108a45e1ae8ede15bc7cdcb9cf9ede067059524ba8d3b8928e91c","fc7909c24b2bb7f42648c605deacb3ae4f9574b95a562dd165e5e9aca2cc7d74","0e084eb83954a090d83730b157f20549cf90b9d0206f5fd0bbcff009788eeafd","eadde565b44e35608447b056761ba172b608b796418ab1244607dc17d21f05e3","d56c63cc53ed72a879f224ab85019db5fc2c30e8f193c1147975d46e3f5d913a","9e1a2a068af2524d2abc48c1edf46de8cfa3329d3688164db5969bc1914377fc","d4cf68e351992fc32021c75820f7d2a858796dd9dc245b7fbbf2cef8656081b2","6b46cf38c45ad81dfcbbd77a1b196c5dea147088f6dab1b1920a508d61bb03ed","fffa85e27836fd556a06660ac0ad76a35ef02687652a81194821c538e847d58f")
