index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e36e9c3eeeeb46c6b54f44118539209a","7883702935e54b98bc4c4de461ccd977","8903e7e6ebd4f46e9910e2e6179c2778","7d0932523c11c434d2b132a2cf8a5835","c57b287858b87f3528e1366bcb4359e8","af9e835fc667bc0d5623fb958c85d10e","d0dcdc6b9a1ff0a5f04c06825b1e1fe7486fa11b3d61cd2f2ae4d01fe1df7ad0","ae1ad1ee347d6b057bafc3636c4bcf705c76126b0358c56b3e6dae6cf3be1533","49116eb9df67b39271c13a80c5044023c55044c2cb4c6303f2b8c2a936524cee","0fa941a6b21162bcb1eb878806a660cf6cf2b7fd28cc83744c65c757386f8666","119bb4f428f6056330cf8a0087b1a52277dbceca3cd81f1d5934c4f4a398c664","b4e86c38b2b424b473220586c583c7da8ecb98d192581ef0ba37774911cf8351","27c14367312d0f81ea1f717eb6006172b34a7c0c","e1a218e3113db626a2ae6810a44f62c71d8bf656","c8cee5411c1c414876f078ecfa9865eb893ad5af","ac083ec95bcab40b618f4f53b76739be81e283f9","2629391b45ae9cb08c5df8dd53bdc7c7f222c171","38d325758725552205de9ab138cb0828c7b632bf")
