index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("701b874a56a9a0ed4101a88621441afec936c4210e18d9a3e20f9a95c454ce40","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","714eeba5b6e4610946cd07c1ddadddc94052bfe450a8a9b1c23495721082884d","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","75569874dadb814ce51d121c108ead006b0f39c27057945b649837563f635f51","09761d69bd5b00b2e767a1105dd3e80ce17b795cd817676c737a1e83c5b96f1b","8d1df3c5357adbab988c62682c85b51582649ff8a3b5c21fca3780fe220e5b11","3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab","e83a61c538f11e4fc9dd9d0f414a9e74d0d585ffe3302e4d3741be6a3523bd1e","01b4d10e08d10c36d0c50f00d017fd6b3da8ebdd194ecafd12b0335c07f9ae10","74075b2bdfaf52d9e5984a28ec7765ae489077a69dd696718e724a455a6f7910","b927e0fe58219305d86df8b3e44493a7c854a6ea4f76d1ebe531a7bfd4365b54","8775bdd7a33f136d31b2840dab68505ac0ab8eaa0bcb58713fae36552b8a1f95","7fe04a3307666e6b6dac381664c901daea3ed5e8af3d7700ac5bde9550350d5a","2e091ecc4c912e6fbe4258da470459018dc8f3efde2803281a416a2c8eb8cf1a","7c8a06b85280a43f96215203fb229d0f2a91b23d84e6ab2d25d9382fef19c35b","da609100cb66e6e4e79916ca1e7481269406e6a484f46187b3accb1626552d61","8136613eb3427f908a200f52b7938cc184a31b626b6c85a35e664c064de6d533","50f2fb45c11e40ea4bbf4a8a733b6e65ce25c3f182aa0aa33ffb59ebae712003","e5a06b250ba10fe0156efe7399b321cb8b1fc8b1929e49ee62d837fa1440313f","2971a37849388c7c3af0840eabc52f0b604fb9894429b7397100b12a069cfeff","247b0d5e40b8b1ec316e9700b499a2dc20d73bfd7f36d913e7725334a2818a7e","7517e597a6ba4a8659b2dd4252085a99baca000684435f8b451af1418bfcac84")
