index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("cf6bcd3a62720f0e26e1880fe7ac9ca6c62f7f05f1f68b8fe59a4eb47377880a","e1e0b887b68307ed192d393e886d8b982e4a2fd232ee13c2f20cd05f91358596","a3078d0c4c564f5efb1460e7d341981282f637d38048501221125756bc740aac","714cef77c92b1d909972580ec7602b0914f30e32c09a5e8cb9cb4d32aa2a2196","192ef0dee8df73eec9ee617abe4b0104799f9543a22a41e28d4d44c3ad713284","caba1085791d13172b1bb5aca25616010349ecce17564a00cb1d89c7158d6459","452d08d420a8d564ff5df6f6a91521887f8b9141d96c77a423ac7fc9c28e07e4","1cc838896fbaf7c1996198309fbf273c058b796cd2ac1ba7a46bee6df606900e","4ae2cb9454077300151e701e6ac4e4d26dc72227135651e02437902ac05aa80d","560ea79a96dc4f459e96df379b00b59828639b02bd7a7a9964b06d04cb43a35a","b28456a0252f4cd308dfb84eeaa14b713d86ba30c4b9ca8d87ba3e592fd27f1c","a3acb9f79647f813671c1a21097a51836b0b95397ebc9cd178bc806e1773c864","5e51bdf067e5781d2868d97e7608187d2fec423856dbc883c6f81a9746e99b9f","d4e1f09cb7b9b03b4779c87f2a10d379f1dd010a9686d221c3a9f45bda5655ee","f138d785d494b8ff12d4a57db94958131f61c76d5d2c4d387b343a213b29d18f","88113bebc49d40c0aa1f1f0b10a7e6e71e4ed3ae595362451bd9dcebcf7f8bf4","498e8d231f97c037909662764397e02f67d0ee16b4f6744cf923f4de3b522bc1","100cad54c1f54126b9d37eb8c9e426cb609fc0eda0e9a241c2c9fd5a3a01ad6c")
