index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9dac79de17f1cb6d75b6e6928eded598","a340d298b29992fdb8c00ef832f7ae34","ab66e11145483ed8a355f966ad8916a3","aa2bd7df9953c17d5ed1925025504296","87e1217cd4517d2c3ea39b1b970a5550","6abfbc7534ed5c716a7daf8a411287edc71140fa","5e8c008279f27fe3c764d925ed05b88a2350dd5d","4e21d3a3602419efcb61a5f3ae7742a356b0e43f","3c48a24679f6ea81ffe1b1c8666342c4265e6cd9","6fea76f1c820df7d4f00421800516e8b6cb36c4f","473abb2c272295473e5556ec7dec06f2018c0a67f208d8ab33de1fb6d40895f5","7ee31fa89e9e68f20004bdc31f8f05a95861b6c678bfa3b57f09fdfad9ef5290","4eccb7813cee8c8039424aebf69f4269d4a6c2c72d81a001254bcdce80034555","81e89754ae2324c684fce71acafc30f8085870be947e7a76971b4fec1b24b5d1","bc6933a8fc324b907e6cf3ded3f76adc27a6ad2445b4f5db1723ac3ec86ed10d")
