index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("d7bf702f56ca53140f4f03b590e9afcbc83809db","0aa94d8df1840d734f25426926e529588502bc08","c3e48c2a2d43c752121e55b909fc705fe4fdaef6","ee0678e58868ebd6603cc2e06a134680d2012c1b","556a2174398890e3d628aec0163a42a7b7fb8ffd","26622e050d5ce4d68445b0cdc2cb23f9e27318ba","3951a7bd03e827caf7a0be90fdfc245e6b1e9f8a","5a8a7e665fdd7a422798d5c055c290fa8b7356d9","749ee9eaa0157de200f3316d912b9b8d8bb3a553","79c222b00b91801bb255376c9454d5bc8079c4a9","7f537a0a77fc8d629b335d52ffef40ea376bd673","8446f80f073db57466459bcbfcaefda3c367cd52","b81bf1b65b8ec0a11105d96cc9f95bb25214add5","ca985f4395e47f1bf9274013b36a0901343fc5a5","d2314f1534ecc1ab97f03cdacf9ed05349f5c574","d4e30bce71e025594339dacf4004075fa22962ea","d85b6531843d5c29cc3bbb86e59d47249db89b9a","d8cd78c16ca865d69f2eb72212b71754f72b4479","cb8be6d2cefe46f3173cb6b9600fb40edb5c5248","c91b0b85a4e1d3409f7bc5195634b88883367cad","0b5153510529e21df075c75ad3dbfe7340ef1f70","1eec28e16be609b5c678c8bb2d4b09b39aa35c05","2480d3f438693cf713ce627b8e67ab39f8ae6bea","308cb5cbc11e0de60953a16a9b8ad8458b5eda67","397d5edae7086bb804f9384396a03c52c2b38daa","398de17ae751f7b4171d6d88c8d29ee42af9efb5","406c7c1f81c3170771afc328ca0d3882ee790e98","411482a5cebe1fc89661cc0527047fa4596ed2d6","49d7c260e89dd5bc288111cbe2bf521e95bbe199","68be8c909a809487d2a3ae418d7ec5adf9d770cb","8baf7c147d3d54b8e2a2e6e26d852028d03ee64b","8e698a7f186b7eda34a56477d5e86e0ad778b53d","aa033e9f102bc8d98360e6079da3c8b4d7e2d3c8","acc1139ecfa0a628edf89b70a3e01a1424a00d5b","f462fa129de484b0cf09a9b4d975b168e5c69370","7edead477048b47d2ac3abdc4baef12579c3c348","958147ab54ee433ac57809b0e8fd94f811d523ba","fb83d869f476e390277aab16b05aa7f3adc0e841","20acde856a043194595ed88ef7ae0b79191394f9")
