index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("c994b132b2a264b8cf1d47b2f432fe6bda631b994ec7dcddf5650113f4a5a404","f383bca7e763b9a76e64489f1e2e54c44e1fd24094e9f3a28d4b45b5ec88b513","813ad8caa4dcbd814c1ee9ea28040d74338e79e76beae92bedc8a47b402dedc2","782c3c463809cd818dadad736f076c36cdea01d8c4efed094d78661ba0a57045","d9938ac4346d03a07f8ce8b57436e75ba5e936372b9bfd0386f18f6d56902c88","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2")
