index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c2bc344f6dde0573ea9acdfb6698bf4c","d6ae7dc2462c8c35c4a074b0a62f07cfef873c77","71c3b2f765b04d0b7ea0328f6ce0c4e2","bf8ecb6519f16a4838ceb0a49097bcc3ef30f3c4","ea6d4dedd8c85e4a6bb60408a0dc1d56def1f4ad4f069c730dc5431b1c23da37","4d388f95a81f810195f6a8dfe86be755","cb6fdb25a15b7797890fadc2b823984f93da5368","cc3d006c2b963b6b34a90886f758b7b1c3575f263977a72f7c0d1922b7feab92","87308ec0a44e79100db9dbec588260ec","939ff7e5eeaccb0c2f4ee080a8e403e532b6317a","03b8472df4beb797f7674c5bc30c5ab74e8e889729d644eb3e6841b0f488ea95","4655a7ac60ed48df9b57648db2f567ef","02ea524429ba2aefac63fed27e924ab3659f8c00","a0db5cff42d0ee0de4d31cff5656ed1acaa6b0afab07d19f9f296d2f72595a56","23a30838502f5fadc97e81f5000c4190","9c1142122370c9b28b13aa147c6e126b3be50845","ae993930cb5d97caa5a95b714bb04ac817bcacbbf8f7655ec43e8d54074e0bd7")
