index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("95d246e4956ad5e6b167a3d9d939542d6d80ec7301f337e00bb109cc220432cf","9b186530f291f0e6ebc981399c956e1de3ba26b0315b945a263250c06831f281","4da158293f93db27906e364a33e5adf8de07a97edaba052d4a9c1c3c3a7f234d","3b4667af3a3e6ed905ae73683ee78d2c608a00e566ae446003da47947320097f","3b58fd0c0ef8a42226be4d26a64235da059986ec7f5990d5c50d47b7a6cfadcd","7c77865f27b8f749b7df805ee76cf6e4575cbe0c4d9c29b75f8260210a802fce","b405ae67c4ad4704c2ae33b2cf60f5b0ccdaff65c2ec44f5913664805d446c9b","0e4ff052250ade1edaab87de194e87a9afeff903695799bcbc3571918b131100")
