index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("cd8a7350b07311f2257eba7ed5d992cf7f00e869461f9a2c3c2003a05bfdcce0","9391014b5a567f4821603c97802c38d8f3053469f47533c57bcfdb787fd9cd57","09092c5061322e3cdc33e3eb4d8379f77ec20ff121acd42b159e87407e421a57","e9a2379991d7ad9f3031c9cd62eab9277b9a2d0179a066b36dd95737182574c8","3b1cb2248bf6b2c9cb493f6ef226a943042ccd8a5e98f4869c55a4efe0a0f835","ac9b107e35f7a8055bb4a556a1835b824f7b32bbc8af0c05dc67164678f25008","464087d09b85c0bbed20e5369264ae21537926da24efca8aed4136c70fe5b1e0","eae18c62dbb29bc6749347d410a16b190cb1b2fdaff6d8318ca9ecb5e572391d","efd85fd28bcf10f32f0ac934ee0e9e71d34a0cbae66ee83abad9a929c3ca91f9","9325343e22181eda59efce7b9d6a54c5565c1798337cb42f07a24dbe93f5b117","7fd271225602c021306c68157a2e17ace5f42853b4762c49f4d82ae8a4e2ebe3","02c3d44ec9a44558f516a5922b09b736c5786d2a675b89b2e86ce8f16e4041b6","0c5e744a5aefe6d6d432b85c33f92f2e2beb75af311421806acb550f766dda41","658f468bc8a762ebef233d284bccb97d64d5b214ea49d9c1cac8b9976ee6c3dc","f9a3f810fb81b3a605038d997341223eb6914aed4f13f4d93466906dc83b1942","1ba3ce9a93262e82a660b8b566134e08fa9680de8716a2893e4e4617086276f4","959cce59fc5d15540e348945b0a18516d9afb56b1f21fd2db4ed209e87cf2657","393bff0edb5c229064ba54343eb38ba1b301246caaa30c20021776c822383bf2","a5c8d558af0e8e3853cdd03be91dc7d915113a291466383005dbe1951809f663","49cf4ae0d9ffbfc0ff4918e34b1c5b066e62663eeee6da4d0fa91172850e03d6","a82e254ec16d3505322b487cfa2cc0f9e629ef72a4f474dbae81b1ec5bd7f2c2","b3a7f14df7b52a0acadc02c58d602bd21e28b7968621f9181531d4977e216ba1")
