index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("011a406e89e603e93640b10325ebbdc8","24fd043f9175680d0c061b28a2801dfc","29b83f0aae7ed38d27ea37d26f3c9117","2e9920b21df472b4dd1e8db4863720bf","3120a5920f8ff70ec6c5a45d7bf2acc8","3c2f6175894bee698c61c6ce76ff9674","45a41ce9f4d8bb2592e8450a1de95dcc","524a57c8c595d9d4cd364612fe2f057c","74dee23eaa98e2e8a7fc355f06a11d97","761909a234ee4f1d856267abe30a3935","7eb3d72fa7d730d3dbca4df34fe26274","8a3e1176cb160fb42357fa3f46f0cbde","8d92e79b7940f0ac5b01bbb77737ca6c","95eaa3fa47a609ceefa24e8c7787bd99","96ee8cc2edc8227a640cef77d4a24e83","aaf34c27edfc3531cf1cf2f2e9a9c45b","ba32f4eef7de6bae9507a63bde1a43aa")
