index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("03bbfdbad1d1fd93d6c76de9a61e9cfc49e7e319","095538ff7643b0c142335c978bfe83d32a68cdac","1f08d9d0fe90d572a1bb0488ffe60e9f20c11002","226aea1e37bc2d809115ceb6ac5ea99e62d759c9","2aa6a1019c16f4142888278098f0c3263e95e446","33306b854770f95d0a164932d72bec1f78de54bf","51acdb8f29726fe7d5b6207f106e7138b564fd39","5413adf32129d50c4984e406d5a3804435d1cfc1","60b5beffaf738f5112233ed9b36975822c1f7bfc","6f3c3129fc2ac56b61fa4df21e723f3dd2aceb70","8ec866aa48a9bb8d6df7fbbe1a073390f4b0098c","d0231ce29ea7a63bea7451c42d69e93c83babb48","d41b8a7bc9bc444372e06e67585a8086d6ae8cfc","d46fbc4a57dce813574ee312001eaad0aa4e52de","ddcf4a6bc32afe94e3ea955eead9db179d5394c2","e3e8ed6ac01e6edb8d8848b1472882afb0b36f0b","f84ffe172f9d6db18320ad69fc9eade46c41e9da","355d70ffe98e6f22b6c3ad8d045e025a5ff78260","63580c4b49d350cf1701fb906c94318a683ae668","63ff8359da29c3ba8352ceb4939f2a3e64987ab6","dd495839a4f4db0331c72a4483071a1cef8da17e")
