index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("560fcc834c9812ec8efe6e9f8248bd8e","512a2b749aa3349d723bab576939b9c1","4bfee1c3f305f8d637d8f57a7e0144c9","1f342e537f5ee6a5695a9d5342c7dfaf","52a076e0886fe1aab52d2486db457c94","9ecbf8a0e05d7f1ac88ba606010ac0d7","7a3857715652a8038348dae6e088058c","6ffa708f9032c0eafe246d6cb11b280e","d2024c82d6da10d2b825818695fc13a1","229d8ac42fee99eaee45c5e5ef2f906b","7b62fb8dabe35ff4bda0a73686b5fa23","5a0d975f2fbc74f7350e36b179662b20","a4c306d7c9f18c1db39d5d2f27607cab","82bbbc4268a7539411e0cb321d61bac6","e7f2bf3d2cf258d2a43e283ad44084c27722e2be","4d2587aa3dd6bad1d6bca9e4b07927be92c5ce60","303975cd8ca6375b84c50c5090a39928c38f78c1","25c132d7a5ffdb0753d21863f890306cc175c25b","19ee39cfef08fb97462afd20f5757c8c7d175f97","dcfe7be7f24706b73a278c7927a711f0215253db","f6f5ba668eb58d40a24b7fb29ef10001276d827f","a86158bb0cde2afee334e808b67eef1c0ec9607b","f8a75521565389cbbaaf6afab1514d5e3e709f84","78f345da81304bc18547d51eaa7945c6eef92038","c357c251ef7ea38ee0a372ebd30e0317056c4e89","31b8f7205d9064d08da1a429b7b8a28b4908b4ee","a1f68160ef0b5f04b22ed44a40983a1b6ec1a6b8","c9fffbb6268da12586364b3fcdd1e19b5cbd625f","ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881","3a8038c5c9841662552e945aedd2c7a70166c449fc36e807820da05ca652ec6f","8910f0ec5450cdb5bfddb7fc7bf239130083cbe00636922a80c9b2ca285a7732","9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971","aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828","91fa601fc12cdf088658d708440c522d8c5525234021f33137f91e530e01248c","23e25f26242e3d63b59bc5c51fa832c9673ba36f92fa636b0e76629b68de6386","dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7","374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4d","87a3fff1105af03dfa6d36b15fca1f8d0c7950f53dd5f14c277af01d0a2f960e","3c67eb5d528cc4ec7d1a617fa77c8da310a66afa3eb7c08c5e594bade5633424","ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3","f8a57cb4dc2e0e8aa16d1b2578c7b5b4d93979d5ae9b3fce9188cba0dfeb54bd","75f8cef32c356839ac2877fe0c9760350b1c42aa2d22722f082ae2fe870e781f")
