index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("0f164894dc7d8256b66d0ebaa7afedcf5462f881","2236d4dcf68c65a822ff0a2ad48d4df99761ad07","35e0e78ec35b68d3ee1805eeceea352c5fe62eb6","51b6ec5de852025f63740826b8edf1c8d22f9261","6001a008a3d3a0c672e80960387f4b10c0a7bd9b","7ad4dcda1c65accc9ef1e168162de7559d2fdf60","ba439d2fc3298675f197c8b17b79f34485271498","be9b6aca8a175df61f2c75932e029f19789fd7e3","c04f874430c261aabd413f27953d30303c382953","c225e0b256edb9a2ea919bacc62f29319de6cb11","e78830384ff14a58df36303602bc9a2c0334a2a4","ea8c3e9f418dcf92412eb01fcdcdc81fdd591bf1","1b2fedd5f2a37a0152231ae4099a13c8d4b73c9e","3bf19ae7fb24fce2509623e7e0d03b5a872456d4","aef3140cd0ee6f49bfcc41f086b7051908b91bdd","a56622a6ef926568d0bdd56fedbff14bd218ad37","aae958960657c52b848a7377b170886a34f4ae99","8d84d32df5768b0d4d2ab8b1327c43f17f182001","ddf0b7b509b240aab6d4ab096284a21d9a3cb910","7e498b3366f54e936cb0af767bfc3d1f92d80687","a97f4b4519947785f66285b546e13e52661a6e6f")
