index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("ab2c19f4c79bc7a2527ab4df85c69559","60a692c6eaf34a042717f54dbec4372848d7a3e3","d51297c4525a9ce3127500059de3596417d031916eb9a52b737a62fb159f61e0","07563c3b4988c221314fdab4b0500d2f","a5f53c9b0f7956790248607e4122db18ba2b8bd9","0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224","a18ac3bfb1be7773182e1367c53ec854","c3d5c1f5ece8f0cf498d4812f981116ad7667286","c8e3c547e22ae37f9eeb37a1efd28de2bae0bfae67ce3798da9592f8579d433c","9be47a6394a32e371869298cdf4bdd56","ca349c0ddd6cda3a53ada634c3c1e1d6f494da8a","9e95fcf79fac246ebb5ded254449126b7dd9ab7c26bc3238814eafb1b61ffd7a","ad1c2d9a87ebc01fa187f2f44d9a977c","03d871509a7369f5622e9ba0e21a14a7e813536d","d9793c24290599662adc4c9cba98a192207d9c5a18360f3a642bd9c07ef70d57","346e7a626d27f9119b795c889881ed3d","ce25203215f689451a2abb52d24216aec153925a","9a557b61005dded36d92a2f4dafdfe9da66506ed8e2af1c851db57d8914c4344","5a39a2c4f00c44e727c3a66e3d5948c2","07e7341b86ace9935c4f1062d41a94f3b31f9bf6","65ad38f05ec60cabdbac516d8b0e6447951a65ca698ca2046c50758c3fd0608b","2afdbca6a8627803b377adc19ef1467d","13a0ce1c3ac688c55ba3f7b57fb6c09ad0e70565","e65e3dd30f250fb1d67edaa36bde0fda7ba3f2d36f4628f77dc9c4e766ee8b32")
