index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("aeacc2d47a88eb68d503f9e30b189641572eb35423df931845f90a4c447ed1be","fc598a686a5a77436684cbd0f72f39033cb70a41d4dbcf5dbab47a7c2522fdda","68eb5590d8ad952215cf54741b0ed6204c19bba4dcb8d704883e007f16de5028","6c4226aa2f8bb646f753ffd282cf4624f6bc8e5ca8a2cb2373f640a2a29cdd95","7d8b568746a643aa0470b14f271f681dd3b09dbc08c893b191d1d6607b86c501","3738e414f43d3b213cf7475a8bb616a3379c09e90c0ba5c6ac0e398d2967ca95","7752fc0c747149d45deeec1023fef8ca73f83a154643531ae9db9cb89b6ce1dc","464888b81e4d67aad73b245efa6442fecf8221abe3ec74d4cd180e4beedaddc6","0279a0a3effc688097eb14d4bd6f1ab8be86f880d01952af7e2b55c51cf107b1","5c878a05fb54c6d06ca4f66d28906d17a423b1305b6aa9bde19df8e8b3e91c5c","491d9f6f4e754a430a29ac6842ee12c43615e33b0e720c61e3f06636559813f7","ce1615ec67296edd05d9dc9a6a075a4724553fca5398c425372b85170aec2106")
