index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="O365 General" AND filehash NOT NULL AND filehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="O365 General" AND oldfilehash NOT NULL AND oldfilehash IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="O365 General" AND customstring3 NOT NULL AND customstring3 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
index=activity AND rg_functionality="O365 General" AND customstring64 NOT NULL AND customstring64 IN ("40450b4212481492d2213d109a0cd0f42de8e813de42d53360da7efac7249df4","ac6e0ee1328cfb1b6ca0541e4dfe7ba6398ea79a300c4019253bd908ab6a3dc0","645f9f81eb83e52bbbd0726e5bf418f8235dd81ba01b6a945f8d6a31bf406992","ba4f9b324809876f906f3cb9b90f8af2f97487167beead549a8cddfd9a7c2fdc","bb6ab67ddbb74e7afb82bb063744a91f3fecf5fd0f453a179c0776727f6870c7","2206cc6bd9d15cf898f175ab845b3deb4b8627102b74e1accefe7a3ff0017112","a0f4ee6ea58a8896d2914176d2bfbdb9e16b700f52d2df1f77fe6ce663c1426a")
