index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("a90c87c90e046e68550f9a21eae3cad25f461e9e9f16a8991e2c7a70a3a59156","08233322eef803317e761c7d380d41fcd1e887d46f99aae5f71a7a590f472205","9d4683a65be134afe71f49dbd798a0a4583fe90cf4b440d81eebcbbfc05ca1cd","a89b344ac85bd27e36388ca3a5437d8cda03c8eb171570f0d437a63b803b0b20","28fa4a74bbef437749573695aeb13ec09139c2c7ee4980cd7128eb3ea17c7fa8","fb792bb72d24cc2284652eb26797afd4ded15d175896ca51657c844433aba8a9","f585db05687ea29d089442cc7cfa7ff84db9587af056d9b78c2f7a030ff7cd3d","b2fd04602223117194181c97ca8692a09f6f5cfdbc07c87560aaab821cd29536","86f504dea07fd952253904c468d83d9014a290e1ff5f2d103059638e07d14b09","d1dc85a875e4fc8ace6d530680fdb3fb2dc6b0f07f892d8714af472c50d3a237","76d2dd21ffaddac1d1903ad1a2b52495e57e73aa16aa2dc6fe9f94c55795a45b")
