index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","168ab5ce440d53ca7397cf3da86d68a67264c6bb0e3f6c8f2066132d6d129bdd","18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566","2308cef810b30ccb5be11fc664ce51b41bb6cee703f09d0a348771cf11f4dc9e","307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59","33987ca88cf48f7f9cfd46610f2c46e104f7c13f0285b5c6c2dca2c6290d9df5","35f971f9f84af8f4a42c97d6258c251e213f99741c1cfadfabbd5f1204e5658e","372d6d866798495d12b0ce745038fa2da575f22c30b061b948804cfdd8d11224","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","4f61f20fa1edfd0ce1de2ca8110c725c9d9c16a9680748c12042a3302054fc72","5043e94612cc5111c07f30968e7bc78e96e277f55262064207a9cd87bc23a343","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","7d58338f7e5b4b77459835a2e057a07f81f72991a0e282d079fd5e227f68b5de","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","8834c84cfd7e086f74a2ffa5b14ced2c039d78feda4bad610aba1c6bb4a6ce7f","90235e199dcb2cd6fa2e68fbfc46f1aa649f2438210fd833b8e7e748b6428ba4","986a88c4053d398624c7736a5f60d2561760b7a532677fc251c8c3dac8f3f60e","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","c6861032317562532c21e373b88efacdc1307c8a3efce8c8992584171157ebed","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173","f4ab473dcb45beb8cb01ad616422c05a45134c6b028f310f06543e2c33584cef","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a")
