index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("73657c062a7cc50a3d51853ec4df904bcb291fdc9cdd08eecaecb78826eb49b6","e47b86b8df43c8c1898abef15b8b7feffe533ae4e1a09e7294dd95f752b0fbb2","6f684f3a8841d5665d083dcf62e67b19e141d845f6c13ee8ba0b6ccdec591a01","030eb56e155fb01d7b190866aaa8b3128f935afd0b7a7b2178dc8e2eb84228b0","c26da19e17423ce4cb4c8c47ebc61d009e77fc1ac4e87ce548cf25b8e4f4dc28","27bb7db8021cd9ade3520a6e67f43ac5","d14122fa7883b89747f273c44b1f71b81669a088764e97256f97b4b20d945ed0","c7ddd58dcb7d9e752157302d516de5492a70be30099c2f806cb15db49d466026","47ff0ae9220a09bfad2a2fb1e2fa2c8ffe5e9cb0466646e2a940ac2e0cf55d04","ef792687b8bcd3c03bed4b09c4722bba921536802afe01f7cdb01cc7c3c60815","816754f6eaf72d2e9c69fe09dcbe50576f7a052a1a450c2a19f01f57a6e13c17","76902d101997df43cd6d3ac10470314a82cb73fa91d212b97c8f210d1fa8271f","b1e228b4b5723d41a575d993b70c906b","a4e1b07bb8d6685755feca89899d9ead490efa9a6b6ccc00af6aaea071549960")
