index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("66e0f3674a66647d5a9e23f47f889d4e3ad9b4a66db8f3def48d4675374d12f7","718fc249bcd6bc37ad229fb2d8c4037dc8dc8f4555d01934266d1a0c17d676cf","1f66675d2102e5d4ac89a239f9022c48b3bf23fe92dadb832d84e0eac6e476d6","50afbf471a92acd1a0a6a2ffe199a52881eb80f683d95273302506194b2cd6ae","812133033ba969731b66c63d5468556e42048bad396ef1026b5a91dda98bc289","542791cf2dde1f449629b03ef95d3c2e0b2f98b1143d619232620d7c9459706c","184f361bcf48265e74c31adee297b0cdfb1bbc39bc58f901c4ffdb69f6b589de","b09a3c2922ac519e76718c56763e39aece82c18556039be8547b166479f35555","b921f0de63ffae2865f5e1dbe8a52a1da505c902e2e4e2a96b85983029d311b5","b5eba1e7403e64559cfd40d56163ac31f3100d5e6e46be8fbb190cb82905528b","c7a7a77343869f30004d02cba1bb24fd6c34770b40a19f37eb11c1b1d814446f","c8995af31396ef03270e847c1f40e1b860f3b838b7a6b0cde9decc2a3d01cad3","d9a94d9ab91ae20cb91946f9c2513848844068914be3e9a6a5279b860febe2cc","cad0ea256fc764f501da91c4e3b17bf08df7525d3dac376a1e23d3b40c60a7a1","803fb1cdeea499f9faaa0c95857d30d6be9d92fcce5dc176d5d3bac8d4f37eb3","733a3db1b54bac7ad8279b7b98be97833ee0e620b5be7db3159e178deb966e53")
